CVE-2024-7889: Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-11 · updated 2026-06-17
Weakness: CWE-664

Description

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Affected products

Citrix Workspace app for Windows: before 2203.1; before 2405; 2203.1-cu1, 2203.1-cu2, 2203.1-cu3, 2203.1-cu4, 2203.1-cu5, 2203.1-cu6_hotfix1 (+1); 2402 — fixed in 2203.1, 2405
Citrix WorkSpace App: before 2405 — fixed in 2405
Citrix Workspace app for Windows: from Current Release (CR) before 2405; from Long Term Service Release (LTSR) before 2402 LTSR CU1 — fixed in 2405, 2402 LTSR CU1

How to fix

Upgrade to a fixed version: Citrix Workspace app for Windows 2203.1, 2405; Citrix WorkSpace App 2405; Citrix Workspace app for Windows 2405, 2402 LTSR CU1. Check the vendor advisory for mitigations.

References

https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US

Get alerted when CVE-2024-7889 or the next vulnerability affects your stack