Sensitive Information Exposure in Ivanti User Workspace Manager
CVE-2026-105813

6.3MEDIUM

Key Information:

Vendor

Ivanti
Status
User Workspace Manager
Vendor
CVE Published:
10 November 2026

What is CVE-2026-105813?

Ivanti User Workspace Manager prior to version 2026.4 is susceptible to a vulnerability that allows local authenticated attackers to access sensitive session tokens stored in cleartext. This exposure can lead to unauthorized access to another user's session, compromising their sensitive information. Users of impacted versions should prioritize updating their software to mitigate these risks.

Affected Version(s)

User Workspace Manager 2026.4

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.