RCE in Strongdm Sdm-Cli

CVE-2025-6183

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.