Description
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Clash Verge Rev | clash-verge-service-ipc | < 2.3.0 | 2.3.0 |
High · 8.4
CVE-2026-26422
EUVD-2026-34977GHSA-5m7x-g9jc-x5g7
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
Published Jun 6, 2026 · Updated Jun 8, 2026 · Assigned by mitre