Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
Priority LOW 32CWE-664Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00246 15th percentileScored 2026-11-07
Fix Fixed Citrix Workspace app for Windows (Citrix): 2405, 2402 LTSR CU1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Citrix | Citrix Workspace app for Windows | Current Release (CR) to before 2405; Long Term Service Release (LTSR) to before 2402 LTSR CU1 | 2405, 2402 LTSR CU1 | Patch available | CNA |
- Citrix Workspace app for Windows VendorCitrix Affected Current Release (CR) to before 2405; Long Term Service Release (LTSR) to before 2402 LTSR CU1 Fixed in 2405, 2402 LTSR CU1 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:* | before 2203.1 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:* | 2203.1 cu1 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu2:*:*:ltsr:windows:*:* | 2203.1 cu2 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu3:*:*:ltsr:windows:*:* | 2203.1 cu3 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu4:*:*:ltsr:windows:*:* | 2203.1 cu4 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu5:*:*:ltsr:windows:*:* | 2203.1 cu5 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix1:*:*:ltsr:windows:*:* | 2203.1 cu6_hotfix1 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix2:*:*:ltsr:windows:*:* | 2203.1 cu6_hotfix2 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:2402:-:*:*:ltsr:windows:*:* | 2402 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:* | before 2405 | Vulnerable | Citrix |
- cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:* Versions before 2203.1 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:* Versions 2203.1 cu1 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu2:*:*:ltsr:windows:*:* Versions 2203.1 cu2 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu3:*:*:ltsr:windows:*:* Versions 2203.1 cu3 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu4:*:*:ltsr:windows:*:* Versions 2203.1 cu4 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu5:*:*:ltsr:windows:*:* Versions 2203.1 cu5 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix1:*:*:ltsr:windows:*:* Versions 2203.1 cu6_hotfix1 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix2:*:*:ltsr:windows:*:* Versions 2203.1 cu6_hotfix2 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:2402:-:*:*:ltsr:windows:*:* Versions 2402 Vulnerable ·Citrix
- cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:* Versions before 2405 Vulnerable ·Citrix
Remediation
- Fix · CNA Citrix Workspace app for Windows (Citrix) Fixed in 2405, 2402 LTSR CU1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Citrix Workspace app for Windows 2402 LTSR CU1, 2405
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-07313 Improper privilege management in Citrix Workspace app for WindowsPriority LOW 26
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7889
- 2026-10-03 Alias added: GHSA-rvhr-9pp2-823m
References
More Citrix Workspace vulnerabilities
- TI-2019-08705 Citrix Workspace App before 1904 for Windows has Incorrect Access Control. KEVCVSS 3.1CRITICAL 9.8
- TI-2020-06625 Improper access control in Citrix Workspace App for Windows CVSS 3.1HIGH 8.8
- TI-2024-05833 Improper privilege management in Citrix Workspace app for Windows CVSS 4.0HIGH 8.5
- TI-2023-10106 Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows CVSS 3.1HIGH 7.8
- TI-2021-05768 Improper access control in Citrix Workspace App for Windows CVSS 3.1HIGH 7.8
- TI-2025-04371 Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges CVSS 4.0HIGH 7.3
Sources
- CVE-2024-7889 · CVE Program
- CVE-2024-7889 · NVD
- FIRST EPSS
- GHSA-rvhr-9pp2-823m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences