Skip to content
OpenAdvisories
High · 8.1 CVE-2025-26168 EUVD-2025-13926GHSA-f4mm-pxc8-94h7

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configurat…

Published May 7, 2025 · Updated May 7, 2025 · Assigned by mitre

Description

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.

Affected products

VendorProductAffectedFixed
IXON VPN Client < 1.4.4 1.4.4

Advisories 1

References