CVE-2023-6336 is a High severity (CVSS 7.2) link following flaw in HYPR Workforce Access on macOS, in versions before 8.7. A user controlled filename can be followed through a link, which a local user can abuse. Upgrade every endpoint to Workforce Access 8.7 or later.
What's affected
The NVD record states the range.
- Affected: HYPR Workforce Access on macOS, versions before 8.7.
- Fixed: 8.7. The record gives "before 8.7" as the affected range, and HYPR's advisories page is the vendor source.
- Severity: CVSS 7.2 High. The weakness is CWE-59, improper link resolution before file access.
- Detail: the record says only what the class of weakness is. HYPR's advisory page did not show further detail when I fetched it, so I will not guess at exploit steps.
Workforce Access is installed on managed endpoints. A flaw in code that runs on every one of them deserves a prompt update, even when the score is not the highest.
How to check if you're exposed
Find the installed version on every endpoint.
- Use your endpoint management or software inventory tool to list installs of HYPR Workforce Access and their versions.
- On Windows, check Apps and Features or the installed programs list. On macOS, check the application's About window or the installed package list.
- Anything below 8.7 is in range.
Ask whoever manages identity for your workstations which version was rolled out and whether auto update is configured. Also confirm whether older laptops or lab images carry an old installer.
What to do now
- Upgrade HYPR Workforce Access to version 8.7 or later on every endpoint where it is installed.
- Use your endpoint management tool to push the update and report the installed version per device.
- Check HYPR's security advisories page for any update to the guidance after this review date.
- Limit local administrator rights where you can, since local privilege issues need a local foothold first.
- Add the product to your software inventory, with version, so the next advisory can be matched in a query.
Why it matters
The weakness is CWE-59, improper link resolution before file access. The macOS entry is the same class of bug as CVE-2023-6335 on Windows, with a higher score of 7.2. The record describes a user controlled filename in the macOS client.
Link following bugs let a privileged component be tricked into reading or writing a file the user could not touch directly. The consequence depends on what the component does, and the record does not say. The NVD vector is local, high complexity, low privileges and user interaction, with changed scope and high integrity and availability impact, which explains the higher score compared with the Windows entry. The kev flag is false, and no exploitation is reported.
Quick check
Which version fixes CVE-2023-6336?
HYPR Workforce Access 8.7, since the record says versions before 8.7 are affected.
Does the platform matter?
Yes. This CVE is for HYPR Workforce Access on macOS.
Sources
- HYPR security advisories (listed in the record, the page did not show detail for this CVE when fetched)
- NVD record
Last reviewed: 19 October 2026.
