Description
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Windscribe | Windscribe for Linux Desktop App | 2.10.1 – < 2.18.3-alpha, 2.10.1 – < 2.18.8 | 2.18.3-alpha |
Advisories 1
- VA-25-343-01 Windscribe for Linux 'changeMTU' local privilege escalation CISA ICS & IT advisories · Dec 10, 2025