Loading vulnerability…
Local Privilege Escalation in Citrix Secure Access Client for Linux
CVE-2026-118269 is an improper privilege management vulnerability in Citrix Secure Access Client for Linux versions earlier than 26.10.4. A low-privileged local user can exploit the vulnerability to gain root privileges without user interaction. The vulnerability has a CVSS v4.0 base score of 8.5.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation elevates a standard local user to root, compromising the confidentiality, integrity, and availability of the affected system. Root privileges permit access to protected data, modification of system resources, and disruption of services.
If you can’t patch tonight, do this now.
No temporary mitigation or workaround is specified. Install the updated client as soon as possible.
Patch, then assume compromise.
Upgrade Citrix Secure Access Client for Linux to version 26.10.4 or later.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.