CVE-2020-25989

HIGH

pritunl-client-electron 1.0.1116.6-1.2.2550.20 - Privilege Escalation via Arbitrary File Write

Title source: llm
STIX 2.1

Description

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://vkas-afk.github.io/vuln-disclosures/

Scores

CVSS v3 7.8
EPSS 0.0074
EPSS Percentile 49.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-59
Status published
Products (1)
pritunl/pritunl-client-electron 1.0.1116.6 - 1.2.2550.20
Published Nov 19, 2020
Tracked Since Feb 18, 2026