CVE-2025-6183

Configd Injection PUBLISHED

Description (CNA)

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.

Affected (CNA)

Vendor / product	Versions
StrongDM / sdm-cli	affected 0 through 47.38.0

CWE

CWE-78

References

https://security.strongdm.com/?tcuUid=56fde839-9388-4361-8d3b-9baa7b2de2ed

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.