CVE-2022-50917

HIGH

ProtonVPN 1.26.0 - Unquoted Service Path Privilege Escalation via WireGuard Configuration

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-50917. PoCs published by gemreda.

AI-analyzed exploit summary This exploit describes an unquoted service path vulnerability in ProtonVPN 1.26.0, where the service path contains spaces, allowing potential privilege escalation if an attacker can place a malicious executable in a parent path.

Description

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated privileges during service startup.

Exploits (1)

exploitdb WRITEUP
by gemreda · textlocalwindows
https://www.exploit-db.com/exploits/50837

This exploit describes an unquoted service path vulnerability in ProtonVPN 1.26.0, where the service path contains spaces, allowing potential privilege escalation if an attacker can place a malicious executable in a parent path.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Theoretical
Target: ProtonVPN 1.26.0
Auth required
Prerequisites: Local file system access · Ability to place executable in a parent path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/50837
Various Sources product
https://protonvpn.com/

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 9.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (2)
proton/protonvpn 1.26.0
ProtonVPN/ProtonVPN 1.26.0
Published Jan 13, 2026
Tracked Since Feb 18, 2026