Boletines de Vulnerabilidades

CVE-2025-26168

   
Software afectado MACOS
 
IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-26168