EIP-2026-117361
PRE-CVEIVPN Client 2.6.1 - Local Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117361. PoCs published by Kacper Szurek.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in IVPN Client for Windows by injecting a custom OpenVPN configuration file with a malicious `--up` directive to execute arbitrary commands as SYSTEM. The PoC sends a crafted JSON payload via a local socket to trigger the vulnerability.
Description
IVPN Client 2.6.1 - Local Privilege Escalation
Exploits (1)
This exploit leverages a privilege escalation vulnerability in IVPN Client for Windows by injecting a custom OpenVPN configuration file with a malicious `--up` directive to execute arbitrary commands as SYSTEM. The PoC sends a crafted JSON payload via a local socket to trigger the vulnerability.