Fixed issues

Last published : Oct 19, 2026

Citrix Workspace™ app 2402 LTSR CU3 Hotfix 1 fixed issues

This fix addresses a security issue for CVE-2025-4879. For more information, see Knowledge Center article CTX694718.
On endpoints where Citrix Workspace app and .NET Desktop Runtime 9.0.5 or later are installed, the Receiver.exe process might stop responding after a session launch. For more information, see the knowledge center article CTX693370.

The following issues have been fixed since Citrix Workspace app for Windows 2402 LTSR CU3:

When opening a published app or desktop using Epic Slingshot with ICA® file signing enabled, you might receive the following security warning message: "An unsafe connection to another computer was blocked."
H265 444 on Intel might result in artifacts being visible in the session.
You might lose keyboard focus after locking and then unlocking the client machine.
Audio playback of an .mp4 video stream redirected through BCR might not work as expected.
When standard users log on to a desktop lock installed machine, they might be shown the local desktop instead of connecting to the published VDA. This issue occurs when an administrator logs on to the desktop lock installed machine first, followed by standard users.
Store enumeration might take an additional 30 seconds when the analytics service (analyticssrv) is not running.
The client's geolocation might not be redirected to the VDI for TSVDA, potentially impacting certain applications and security functionalities.
After opening a published application followed by a local client application, local application might unexpectedly lose focus. To enable the fix, add the following registry entry:

Registry Path: [HKCU or HKLM]\Software\Citrix\Ica Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Seamless Windows

Registry Entry:
- Name: TWIWindowAvoidStealFocusFromLocalApps
- Type: REG_SZ
- Value: true

After updating Citrix Workspace, users might be able to launch an application multiple times through selfservice even with the "limit to one instance per user" setting is enabled. To enable fix, set the following registry key on the endpoint:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\Dazzle Name: StopSpinnerPostLaunchComplete Type: String Value: True.
You might experience intermittent smartcard disconnects when using certain third-party smart card vendors.
Desktop sessions might open in Full screen mode with no launch of Desktop Viewer when VDA has IPV6 address.
You might fail to retrieve Global Apps Configuration service (GACS) settings when GACS is configured with only the Citrix Gateway URL.
After upgrading Citrix Workspace app, you might face issues opening apps on legacy XenApp servers like XA6.5. This problem occurs only when using a custom ICA file that attempts to enumerate the least loaded server using HTTPBrowserAddress.
The sessions might intermittently disconnect if an ADC High Availability failover occurs.
You might fail to open resources after upgrading to the latest version of Citrix Workspace app, receiving the following error message:

"Unable to launch resources - The Citrix Workspace received a corrupt ICA file. The key (Wfclient) has no associated value."

This issue occurs only when the Citrix Workspace app is installed on a machine set to the Thai region.

When using Windows Server 2019 VDAs with Citrix Workspace app 2402 installed, you might observe high CPU utilization by WMIPRVSE.EXE.
When using seamless apps, the wfica32.exe process might exit unexpectedly and the session might fail.
When generating an ICA file using Storebrowse.exe, you might notice that published app names with non-ASCII characters lose some content under . This issue occurs on Citrix Workspace app for Windows versions 2309 and later.

When enhanced SSO authentication for a store in Citrix Workspace app is enabled, you might notice login failures for apps from the store that use explicit usernames and passwords.
After upgrading the Citrix Workspace app to a newer version, an application might fail to open properly due to Single Sign-On (SSO) and login issues. This problem occurs in environments configured to use Citrix Federated Authentication Service (FAS). You can disable the legacy SSON to session based on store URL by setting the following registry key on the endpoint:

HKLM/Software/Wow6432Node/Citrix/ICAClient/SSON Name: SSONDisabledURLList Type: multistring Value: URL

You might notice that when using the latest 2402 CU1 or later Citrix Workspace app installer, older versions of Citrix Workspace app such as 2203 and 1912 cannot be uninstalled using the /uninstall command.
When a third-party agent is installed, the device might stop responding with Blue Screen of Death (BSOD) error during the Citrix Workspace app upgrade.

When you attempt to select a date from a standard date picker within a published app, you might intermittently notice that the main seamless application window disappears.