Description
AirVPN Eddie on MacOS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects Eddie: 2.24.6.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AirVPN | Eddie | 2.24.6 | — |
References
- https://fluidattacks.com/advisories/blink182 third-party-advisory
- https://eddie.website/ product
- https://github.com/AirVPN/Eddie product
- https://airvpn.org/forums/topic/79305-eddie-desktop-edition-225-beta-released/ patch