This vulnerability (CVE-2026-53565) in Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows is categorized under CWE-269 (Improper Privilege Management). It affects Secure Access Client versions prior to 26.6.1.20 and Endpoint Analysis Client versions prior to 26.5.1.7. The CVSS 4.0 base score is 8.5, indicating high severity, with attack vector local, low attack complexity, no user interaction, and requiring low privileges. The vulnerability could allow an attacker with limited privileges to gain higher privileges due to improper privilege management. As of the published date, no official patch or remediation guidance has been provided by the vendor.

The vulnerability could allow an attacker with local access and low privileges to escalate their privileges on the affected Citrix clients. This could lead to unauthorized actions at a higher privilege level, potentially compromising system integrity or confidentiality. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for unusual privilege escalations related to the affected Citrix clients.