---
id: "CVE-2019-11634"
kind: "vulnerability"
aliases: ["CVE-2019-11634"]
title: "Citrix Workspace Application and Receiver for Windows: Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.08091
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Citrix Workspace Application and Receiver for Windows", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["citrix", "citrix-workspace", "exploited", "ransomware", "vendor", "virtual-desktops", "windows"]
not_affected_if: ["no-citrix-clients"]
published_at: "2019-05-22T17:29:00+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-11634", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11634", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Citrix Workspace Application and Receiver for Windows: Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Citrix Workspace Application and Receiver for Windows fail to enforce local drive access preferences, which allows remote code execution on the client. An attacker who can reach a user's session can run code on that Windows machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Citrix Workspace Application and Receiver for Windows affected ? fixed ?

## How to check

Check the installed Citrix Workspace app or Receiver version under Programs and Features on each Windows client.

## Fix

Update Citrix Workspace app or Receiver for Windows to the version fixed by Citrix, as CISA requires applying the vendor updates.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-11634
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-11634

## From the sources

Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_