Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 22, 2019 · Catalog

   Detected

   Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Aug 11, 2026 · Catalog

   Updated

   Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

Affected

• cpe citrix/receiver4.9
• cpe citrix/workspaceversion unspecified
• vendor Citrix Workspace Application and Receiver for Windowsversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2019-11634

  Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

  cisa.gov
• CVE.orgVulnerability recordCVE-2019-11634

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2019-11634

  30-day exploitation probability 8.1%

  first.org
• NIST NVDVulnerability recordCVE-2019-11634

  Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Vendor Advisory · support.citrix.com
• Vendor Advisory · support.citrix.com
• US Government Resource · cisa.gov