StrongDM vulnerabilities
We track 4 vulnerabilities in StrongDM products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
Latest StrongDM vulnerabilities
- 7.0 High severity
sdm-cli: Improper Neutralization of Special Elements used in an OS Command
The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.
- 8.5 High severity
sdm: Improper Privilege Management
The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.
- 8.5 High severity
sdm-cli: Improper Neutralization of Special Elements used in an OS Command
The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.
- 8.5 High severity
sdm-cli: Cleartext Transmission of Sensitive Information
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.