Medium severity · published Aug 18, 2026
CVE-2026-18751
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
5.2
CVSS
0.2%
EPSS
No
On KEV
Description
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.
This issue affects WorkSpace App: 2607.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
WorkSpace App · Citrix
2607 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18751
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18751
support.citrix.com
https://support.citrix.com/external/article/CTX696911
More from WorkSpace App
7.8
CVE-2020-13885
Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application
7.8
CVE-2020-13884
Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of…