Skip to content
OpenAdvisories
High VA-25-343-01 1 CVE

Windscribe for Linux 'changeMTU' local privilege escalation

Published Dec 10, 2025 · Updated Dec 10, 2025

Vendor: Windscribe Product: for Linux Desktop App

Summary

A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.

Vulnerabilities 1

  • High 7.8
    CVE-2025-65199

    Windscribe for Linux 'changeMTU' local privilege escalation

    A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscrib…

    Windscribe Windscribe for Linux Desktop App Linux

Revision history

  1. #1.0.0

    Initial publication