Read the docs
TI-2025-28484 Aliases CVE-2025-43917GHSA-8m5h-w7m5-3jm3

Incorrect authorization in Pritunl-Client

Priority LOW 37CWE-863Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00164 5th percentileScored 2026-11-07
Fix Fixed Pritunl-Client (Pritunl): 1.3.4220.57

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PritunlPritunl-Clientbefore 1.3.4220.571.3.4220.57Patch availableCNA
  • Pritunl-Client VendorPritunl Affected before 1.3.4220.57 Fixed in 1.3.4220.57 Patch available CNA

Remediation

  • Fix · CNA Pritunl-Client (Pritunl) Fixed in 1.3.4220.57

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-43917
  2. 2026-10-03 Alias added: GHSA-8m5h-w7m5-3jm3

References

Other 1

  • TI-2016-06070 Path traversal in pritunl-client-electron CVSS 3.1CRITICAL 9.8
  • TI-2020-15442 Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of… CVSS 3.1MEDIUM 5.3
  • TI-2022-09057 Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related… CVSS 3.1HIGH 7.8
  • TI-2020-15890 Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6… CVSS 3.1HIGH 7.8
  • TI-2020-16688 Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the… CVSS 3.1HIGH 7.8
  • TI-2016-06071 Improper signature verification in pritunl-client-electron CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences