sdm-cli vulnerabilities

3 known vulnerabilities in sdm-cli from StrongDM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  sdm-cli: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-6183Aug 20, 2025StrongDM

  The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.

• 8.5 High severity

  sdm-cli: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-6181Aug 20, 2025StrongDM

  The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.

• 8.5 High severity

  sdm-cli: Cleartext Transmission of Sensitive Information

  CVE-2025-6180Aug 20, 2025StrongDM

  The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.