CVE-2025-12694

HIGH

Forcepoint - Local Privilege Escalation in VPN Client

Title source: rule

Description

A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.

References (1)

Core 1

Core References

https://support.forcepoint.com/s/article/Security-Advisory-Local-Privilege-Escalation-in-VPN-Client-for-Windows

Scores

CVSS v3 7.8

EPSS 0.0010

EPSS Percentile 1.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-250

Status published

Products (2)

Forcepoint/VPN Client < 6.11.3

forcepoint/vpn_client < 6.11.3

Published Jun 04, 2026

Tracked Since Jun 04, 2026