StrongDM
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| sdm-cli | 3 | – | Aug 20, 2025 |
| sdm | 1 | – | Aug 20, 2025 |
| StrongDM Desktop Application | 1 | – | May 29, 2026 |
| StrongDM Desktop Client | 1 | – | May 29, 2026 |
Exploited and recent CVEs
- CVE-2026-4387 Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file 0.1%
- CVE-2026-4387 Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file 0.1%
- CVE-2025-6183 Configd Injection 0.2%
- CVE-2025-6182 Root Certificate Injection <0.1%
- CVE-2025-6181 The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation. 0.2%
- CVE-2025-6180 Authentication Hijack 0.1%