Privilege Escalation Vulnerability in Ivanti Secure Access Client

CVE-2025-22454

Summary

A security flaw has been identified in the Ivanti Secure Access Client prior to version 22.7R4, where insufficiently restrictive permissions can be exploited by a local authenticated attacker to escalate their privileges. This vulnerability highlights the need for rigorous permission checks within applications to mitigate the risk of unauthorized access and control.

References