CVE-2025-6759 — Improper Privilege Management in Citrix Windows Virtual Delivery Agent FOR Cvad AND Citrix Daas

CWE-269 — Improper Privilege Management4 documents3 sources
Severity
7.3HIGHNVD
EPSS
0.0%
top 93.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Citrix Windows Virtual Delivery Agent FOR Cvad AND Citrix DaasCitrix Virtual Apps AND DesktopsCitrix ADM+6 more
Timeline
PublishedJul 8
Latest updateJul 9

Description

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages9 packages

▶CVEListV5citrix/windows_virtual_delivery_agent_for_cvad_and_citrix_daasCurrent Release (CR) — 2503+1

🔴Vulnerability Details

1
GHSA
GHSA-w9w5-c7vm-7wqf: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS↗2025-07-09
▶

📋Vendor Advisories

2
Citrix
CVE-2025-6759: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS↗2025-07-08
▶
Citrix
Citrix Security Bulletin CTX694820↗
▶