Privilege escalation in Strongdm Sdm

CVE-2025-6182

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Vulnerability class: Privilege Escalation

EPSS: 0.001 (0.2th percentile) — read the EPSS interpretation.