Cisco Secure Workload API Authentication Bypass | MSSP Advisory

A critical vulnerability in Cisco Secure Workload allows attackers to obtain site admin privileges on the on-premises version of the platform. Threat actors can modify security policies, compromise endpoints, and read configuration data across tenant boundaries. The vulnerability targets API endpoints and carries maximum CVSS scoring.

Your RMM and remote access tools likely depend on network segmentation policies that Cisco Secure Workload manages, making your client access paths vulnerable if exploited. Every client running this platform becomes a retention risk because compromised security policies can disable their entire zero trust architecture and micro-segmentation controls.

📬