Citrix Workspace App vulnerabilities

3 CVEs affecting Citrix Workspace App, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18751, published 2026-08-18.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13885, published 2020-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application.
• CVE-2020-13884, published 2020-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.
• CVE-2026-18751, published 2026-08-18. Medium severity, CVSS 5.2. EPSS: 0.2% chance of exploitation in the next 30 days. External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.