JSON Processing Vulnerability in StrongDM macOS Client
CVE-2025-6183

7HIGH

Key Information:

Vendor

Strongdm

Status
Sdm-cli
Vendor
CVE Published:
20 August 2025

What is CVE-2025-6183?

The StrongDM macOS client has a significant flaw in its handling of JSON-formatted messages. This vulnerability allows attackers to send specially crafted JSON messages that could potentially alter system configurations on macOS devices. Such exploitation could lead to unauthorized changes, posing risks to system integrity and security.

Affected Version(s)

sdm-cli MacOS 0 <= 47.38.0

References

https://security.strongdm.com/?tcuUid=56fde839-9388-4361-...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.