Read the docs
TI-2023-10107 Aliases CVE-2023-24486GHSA-wjqh-799v-63vh

Improper access control in Citrix Workspace app for Linux

Priority LOW 24CWE-284Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-284.

Summary

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00185 8th percentileScored 2026-11-07
Fix Fixed Citrix Workspace app for Linux (Citrix): 2302

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CitrixCitrix Workspace app for Linuxbefore 23022302Patch availableCNA
  • Citrix Workspace app for Linux VendorCitrix Affected before 2302 Fixed in 2302 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:citrix:workspace:*:*:*:*:*:linux:*:*before 2302VulnerableCitrix
  • cpe:2.3:a:citrix:workspace:*:*:*:*:*:linux:*:* Versions before 2302 Vulnerable ·Citrix

Remediation

  • Fix · CNA Citrix Workspace app for Linux (Citrix) Fixed in 2302

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-24486
  2. 2026-10-03 Alias added: GHSA-wjqh-799v-63vh

References

Advisory 1

  • TI-2019-08705 Citrix Workspace App before 1904 for Windows has Incorrect Access Control. KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06625 Improper access control in Citrix Workspace App for Windows CVSS 3.1HIGH 8.8
  • TI-2024-05833 Improper privilege management in Citrix Workspace app for Windows CVSS 4.0HIGH 8.5
  • TI-2023-10106 Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows CVSS 3.1HIGH 7.8
  • TI-2021-05768 Improper access control in Citrix Workspace App for Windows CVSS 3.1HIGH 7.8
  • TI-2025-04371 Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges CVSS 4.0HIGH 7.3
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences