CVE-2026-18751
MediumCVSS 5.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
Risk Assessment
An attacker can manipulate file names or paths, potentially leading to unauthorized file access or execution of malicious code.
Recommendation
Update Citrix WorkSpace App to the latest available version that includes the fix.
Other vulnerabilities in Citrix WorkSpace App
See all- CVE-2026-84420Medium
An out-of-bounds read vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
- CVE-2026-84419Medium
An out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
- CVE-2019-11634CriticalActively exploited
Citrix Workspace App before 1904 for Windows has an incorrect access control vulnerability, potentially allowing unauthorized access to resources.
Original NVD description (English source)
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS