CVE-2025-6180 — Authentication Hijack
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authenticatio…
Published: 2025-08-20 · CVSS: 8.5 · CVSS 4.0
The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7