CVE-2025-6180: Strongdm Sdm-CLI

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.

Affected products

• Strongdm Sdm-CLI: up to and including 47.96.0

Published 2025-08-20. Last modified 2026-06-17.