What’s Vulnerable › Vulnerabilities
CVE-2022-21825
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-02-09 · updated 2026-06-17
- Weakness: CWE-284
Description
An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.
Affected products
- Citrix Workspace app for Windows: from 2012 before 2112 — fixed in 2112
- Citrix Workspace App for Linux: Citrix Workspace App for Linux 2112 and later
How to fix
Upgrade to a fixed version: Citrix Workspace app for Windows 2112. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-21825 or the next vulnerability affects your stack