CVE-2021-36235: Ivanti Workspace Control

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges.

Affected products

• Ivanti Workspace Control: before 10.6.30.0 (fixed in 10.6.30.0)

Published 2021-09-01. Last modified 2026-06-17.