CVE-2025-4879 - Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

HIGH

Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Published Jun 17, 2025

7.3

HIGH

CVSS 4.0

EPSS 0.13%

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Citrix	Workspace App for Windows	unaffected	Affected ≥ 2402 LTSR, < CU2 Hotfix 1 ≥ 2402 LTSR, < CU3 Hotfix 1 ≥ CR, < 2409

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18569		Advisory
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694718		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Citrix

Published Jun 17, 2025

Updated Feb 26, 2026

Reserved May 17, 2025

CISA Vulnrichment

Updated Jun 18, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Citrix

Published Jun 17, 2025

Updated Feb 26, 2026

GitHub

No data