Improper System Certificate Management in StrongDM Windows Service

CVE-2025-6182

What is CVE-2025-6182?

The StrongDM Windows service contains a flaw in its handling of system certificate management, allowing attackers to exploit the service's vulnerabilities. This could enable unauthorized installation of untrusted root certificates or the removal of trusted certificates, potentially leading to unauthorized access and manipulation of secure communications within an affected system. Securing your StrongDM Windows Service is essential to mitigative these risks and ensure the integrity of system certificate handling.

References