Unquoted service path vulnerability on Veyon
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-428.
Summary
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| veyon | veyon | before 0.11.5 | 0.11.5 | Patch available | CNA |
- veyon Vendorveyon Affected before 0.11.5 Fixed in 0.11.5 Patch available CNA
Remediation
- Fix · CNA veyon (veyon) Fixed in 0.11.5
Timeline
- 2026-10-02 Threatist record created from CVE-2020-15261
References
Exploit 3
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences