CVE-2025-3651 — Command Injection in iManage Work Desktop for Mac's Agent Service

CVE-2025-3651

Command Injection in iManage Work Desktop for Mac's Agent Service PUBLISHED

Description (CNA)

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33.

Affected (CNA)

Vendor / product	Versions
iManage / Work Desktop for Mac	affected 0 before 10.8.2.33

CWE

CWE-346, CWE-668

References

https://docs.imanage.com/security/CVE-2025-3651.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.