CVE-2025-66391

Name of the Vulnerable Software and Affected Versions Citrix Cloud versions prior to 2025-11-10

Description An authorization flaw allows an account with read-only access to trigger the start of workflows intended for write operations. For example, an attacker can initiate a password reset process, causing the system to send a one-time password to an email address controlled by the attacker.

Recommendations Update Citrix Cloud to a version released after 2025-11-10.