CVE-2025-6182 — Root Certificate Injection
The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certific…
Published: 2025-08-20 · CVSS: 8.5 · CVSS 4.0
The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7