StrongDM Client Pre-Authentication Token Vulnerability Allowing Authentication Hijacking

A vulnerability has been identified in the StrongDM Client that inadequately protected a pre-authentication token. This flaw allows attackers to intercept and reuse the token, potentially exploiting it to redeem valid authentication credentials through a race condition. The vulnerability affects all client application CLI versions prior to 47.97.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access by hijacking authentication tokens, allowing attackers to impersonate legitimate users.

Remediation

Users are advised to update to version 47.97.0 or later.