Insufficient Protection of Pre-Authentication Token in StrongDM Client

CVE-2025-6180

What is CVE-2025-6180?

The StrongDM Client exhibits a security flaw due to insufficient protection of a pre-authentication token. This weakness may allow attackers to intercept and reuse the token, potentially leading to unauthorized access by exploiting a race condition. Organizations using the StrongDM Client should prioritize reviewing their security measures and apply available patches to mitigate the risks associated with this vulnerability.

References