Workflow Bypass Vulnerability in Citrix Cloud Platform
CVE-2025-66391

8.8HIGH

Key Information:

Vendor

Citrix
Status
Citrix Cloud
Vendor
CVE Published:
17 June 2026

What is CVE-2025-66391?

A security vulnerability exists in Citrix Cloud that allows an account with read-only access to initiate a workflow for sensitive write operations. This flaw can be exploited by an unauthorized user, allowing them to trigger a password reset process. By doing so, the system may send a one-time password to an email address controlled by the attacker, enabling them to gain unauthorized access to user accounts. This behavior underscores significant risks associated with insufficient access control measures within the workflow management of Citrix Cloud.

References

https://citrix.cloud.com/
https://github.com/mandeepsohal/CVE-2025-66391/blob/main/...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.