Skip to content
OpenAdvisories
High · 8.8 CVE-2018-4010 EUVD-2018-15796GHSA-jg7p-w69v-cf32

An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configur…

Published Sep 7, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.

Affected products

VendorProductAffectedFixed
Talos ProtonVPN ProtonVPN VPN Client 1.5.1 —

References