Two serious vulnerabilities turned up in the Citrix Workspace app for Windows: CVE-2024-7889 and CVE-2024-7890. If your team uses Citrix Workspace for remote access, these are worth a quick look and a fast update.
What they are
CVE-2024-7889 is a local privilege escalation flaw. A low-privileged user on the machine can gain SYSTEM privileges. CVSS v4.0 base score 7.0.
CVE-2024-7890 is the same class of flaw, local privilege escalation to SYSTEM, with a CVSS v4.0 base score of 5.4. Both need local access to the machine, not a remote connection.
Why it matters
- Credentials or sensitive data could leak.
- An attacker could take control of an affected machine.
- That machine becomes a way into the rest of the network.
- A breach like this creates compliance problems too.
What to do
- Update Citrix Workspace to the latest version now. That is the fix.
- Watch for unusual activity or login attempts in the meantime.
- Keep your firewall and endpoint protection in front of it.
- Tell users why the update matters so it actually gets installed.
For the affected versions and full details, check the official Citrix security bulletin for CVE-2024-7889 and CVE-2024-7890. If you want someone to confirm your machines are patched, that is a quick job I can take off your plate.
