Vulnerability in Strongdm Sdm-Cli
CVE-2025-6180
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.
EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.
Affected products
- Strongdm Sdm-cli — versions 0