Citrix Workspace App MacOS External Control of File Name/Path Vulnerability
CVE-2026-18751 Published on August 18, 2026

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.

NVD

Vulnerability Analysis

CVE-2026-18751 can be exploited with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

ACTIVE

Weakness Type

External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.

Products Associated with CVE-2026-18751

Want to know whenever a new CVE is published for Citrix Workspace? stack.watch will email you.

Citrix Workspace

Affected Versions

Citrix WorkSpace App Version 2607 is affected by CVE-2026-18751

Exploit Probability

EPSS

0.18%

Percentile

6.93%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.