Citrix Workspace app for Windows Security Bulletin CVE-2025-4879
Description of Problem
A vulnerability has been discovered that impacts the Citrix Workspace app for Windows.
Affected Versions
The vulnerability affects the following supported versions of the Citrix Workspace app for Windows
Current Release (CR)
- Citrix Workspace app for Windows versions before 2409
Long Term Service Release (LTSR)
- Citrix Workspace app for Windows versions before 2402 LTSR CU2 Hotfix 1
- Citrix Workspace app for Windows versions before 2402 LTSR CU3 Hotfix 1
Summary
| CVE ID | Description | Pre-conditions | CWE</strong | CVSSv4 |
| CVE-2025-4879 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Local access to the target system and App Protection service should be running | CWE-269: Improper Privilege Management | CVSS v4.0 Base Score: 7.3 (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) |
What Customers Should Do
Citrix strongly recommends that customers upgrade their Citrix Workspace app for Windows to versions that contain the fixes as soon as possible.
Citrix Workspace app for Windows versions that contain the fixes are:
Current Release (CR)
- Citrix Workspace app for Windows 2409 and later versions
Long Term Service Release (LTSR)
- Citrix Workspace app for Windows 2402 LTSR CU2 Hotfix 1 and later versions
- Citrix Workspace app for Windows 2402 LTSR CU3 Hotfix 1 and later versions
More Information
For assistance from the Kraft Kennedy team, please contact us.