The host is installed with Citrix Workspace App before 1904 or Citrix Receiver before 4.9 CU6(4.9.6001) and is prone to a remote code execution vulnerability. A flaw is present in the application, which fails to enforce local drive access preferences. Successful exploitation could allow attackers to get read/write access to the clients local drives which could enable code execution on the client device.