CVE-2025-3651

critical · 9.3

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33.

9.3

CVSS

0.3%

EPSS (exploit prob.)

20th

EPSS percentile

2025-04-17

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-346CWE-668

References

https://docs.imanage.com/security/CVE-2025-3651.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-3651