Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-6182

Root Certificate Injection

Description

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

StrongDM sdm

Default version status: unaffected

  • 0 to ≤ 47.49.0affected

References