CVE-2024-6286: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-10 · updated 2026-06-17
Weakness: CWE-269

Description

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Affected products

Citrix Workspace app for Windows: before 2203.1; before 2403.1; 2203.1-cu1, 2203.1-cu2, 2203.1-cu3, 2203.1-cu4, 2203.1-cu5, 2203.1-cu6; 2203.1 — fixed in 2203.1, 2403.1
Citrix Workspace app for Windows: before 2403.1 — fixed in 2403.1
Citrix Workspace app for Windows: from 2403 before 1; from 2402 LTSR before 0 — fixed in 1, 0

How to fix

Upgrade to a fixed version: Citrix Workspace app for Windows 2203.1, 2403.1; Citrix Workspace app for Windows 2403.1; Citrix Workspace app for Windows 1, 0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-6286 or the next vulnerability affects your stack