high8.2
CVE-2025-43917
In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.
Impact
In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pritunl | Pritunl Client | before 1.3.4220.57 |
Versions were read from the advisory text. No structured product data has been published for this record yet.