EUVD-2026-60701
GHSA-c292-w6wv-cjq9
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector with low-privilege requirement and mandatory user interaction; no confidentiality impact per CVSS 4.0 source vector.
Primary rating from Vendor (Citrix).
CVSS VectorVendor: Citrix
Lifecycle Timeline
2DescriptionCVE.org
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.
This issue affects WorkSpace App: 2607.
AnalysisAI
External control of file name or path (CWE-73) in Citrix WorkSpace App 2607 on macOS allows a local low-privileged attacker, with active user interaction, to manipulate file system paths and cause high integrity and availability impacts on the vulnerable system. The CVSS 4.0 vector confirms local access with low privileges and required user interaction, resulting in a medium severity score of 5.2. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to the macOS endpoint running Citrix WorkSpace App version 2607 specifically. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 5.2 (Medium) reflects a realistic, constrained attack surface: AV:L requires physical or logical local access; PR:L requires low-privilege account presence on the endpoint; and UI:A mandates active user interaction before the exploit can succeed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Citrix advisory at https://support.citrix.com/external/article/CTX696911 for the vendor-released patched version; the input data references the advisory but does not supply an explicit fixed version number, so upgrade to any Citrix WorkSpace App release confirmed by Citrix as unaffected. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Workspace App
View allCitrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during
Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows loc
Same weakness CWE-73 – External Control of File Name or Path
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today