StrongDM — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by StrongDM (strongdm). https://vulnogram.org/seaview/icons/strongdm.png StrongDM — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2026-4387 · 2 LOW — Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file https://vulnogram.org/CVE-2026-4387 https://vulnogram.org/CVE-2026-4387 StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a per-user state file located at C:\Users\<username>… Low Fri, 29 May 2026 18:28:00 GMT CVE-2025-6183 · 7 HIGH — Configd Injection https://vulnogram.org/CVE-2025-6183 https://vulnogram.org/CVE-2025-6183 The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message. High Wed, 20 Aug 2025 16:45:06 GMT CVE-2025-6182 · 8.5 HIGH — Root Certificate Injection https://vulnogram.org/CVE-2025-6182 https://vulnogram.org/CVE-2025-6182 The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones. High Wed, 20 Aug 2025 16:44:26 GMT CVE-2025-6181 · 8.5 HIGH https://vulnogram.org/CVE-2025-6181 https://vulnogram.org/CVE-2025-6181 The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation. High Wed, 20 Aug 2025 16:43:39 GMT CVE-2025-6180 · 8.5 HIGH — Authentication Hijack https://vulnogram.org/CVE-2025-6180 https://vulnogram.org/CVE-2025-6180 The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition. High Wed, 20 Aug 2025 16:41:25 GMT