Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-2781 EUVD-2025-8668GHSA-wwp5-7982-8x96

WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory

Published Mar 28, 2025 · Updated Aug 8, 2026 · Assigned by WatchGuard

Description

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

Affected products

VendorProductAffectedFixed
WatchGuard Mobile VPN with SSL Client 11.0 – < 12.11.2 12.11.2

References