CVE-2024-8068
CISA KEVPublished August 25, 2025 · Updated April 3, 2026
high
Official Description+
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Affected Products
| Vendor | Product |
|---|---|
| Citrix | Session Recording |
Patch Status
Patch by 2025-09-15
Recommended Actions
- Check if your systems use any of the affected products listed above.
- Apply vendor patches immediately if available.
- This vulnerability is in CISA's Known Exploited Vulnerabilities catalog — prioritize remediation.
- Monitor vendor advisories for updates and additional mitigations.
- Review logs for indicators of compromise related to CVE-2024-8068.