StrongDM vulnerabilities
5 published CVEs name StrongDM among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-4387
Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file
StrongDM · StrongDM Desktop Application
Low2.0 - CVE-2025-6183
Configd Injection
StrongDM · sdm-cli
High7.0 - CVE-2025-6182
Root Certificate Injection
StrongDM · sdm
High8.5 - CVE-2025-6181
The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.
StrongDM · sdm-cli
High8.5 - CVE-2025-6180
Authentication Hijack
StrongDM · sdm-cli
High8.5