diff --git a/agent/modals/client/client_download_pdf.php b/agent/modals/client/client_download_pdf.php
index 6f29c5d9..8c8a3cb8 100644
--- a/agent/modals/client/client_download_pdf.php
+++ b/agent/modals/client/client_download_pdf.php
@@ -8,6 +8,7 @@
                 </button>
             </div>
             <form action="post.php" method="post" autocomplete="off" target="_blank">
+                <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
                 <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
                 <div class="modal-body">
                     <ul class="list-group">