CVE-2023-24486: Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-10 · updated 2026-06-17
Weakness: CWE-284

Description

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.

Affected products

Citrix Workspace app for Windows: before 2302 — fixed in 2302
Citrix Workspace app for Windows: before 2302 — fixed in 2302

How to fix

Upgrade to a fixed version: Citrix Workspace app for Windows 2302; Citrix Workspace app for Windows 2302. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-24486 or the next vulnerability affects your stack