EIP-2026-118068

PRE-CVE

Viscosity 1.6.7 - Local Privilege Escalation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118068. PoCs published by Kacper Szurek.

AI-analyzed exploit summary The exploit describes a privilege escalation vulnerability in Viscosity for Windows 1.6.7, where the ViscosityService incorrectly validates paths, allowing execution of OpenVPN with a custom DLL as SYSTEM. The PoC is referenced externally, and the solution involves updating to version 1.6.8.

Description

Viscosity 1.6.7 - Local Privilege Escalation

Exploits (1)

exploitdb WRITEUP
by Kacper Szurek · textlocalwindows
https://www.exploit-db.com/exploits/41207

The exploit describes a privilege escalation vulnerability in Viscosity for Windows 1.6.7, where the ViscosityService incorrectly validates paths, allowing execution of OpenVPN with a custom DLL as SYSTEM. The PoC is referenced externally, and the solution involves updating to version 1.6.8.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: Viscosity for Windows 1.6.7
Auth required
Prerequisites: Local access to the target system · Viscosity for Windows 1.6.7 installed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026