RCE in Strongdm Sdm-Cli

CVE-2025-6181

The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.