Vulnerabilities

TI-2025-28484 CVE-2025-43917 · GHSA-8m5h-w7m5-3jm3

Incorrect authorization in Pritunl-Client

LOW 37

In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00164 Published 2025-04-19 Fixed in 1.3.4220.57 CWE-863

TI-2022-09057 CVE-2022-25372 · GHSA-9qc3-99wr-x835

LOW 35

Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00647 Published 2022-02-20 No fix listed CWE-269

TI-2020-16688 CVE-2020-27519 · GHSA-rxm5-9q2g-4c8r

LOW 34

Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00348 Published 2021-04-30 No fix listed CWE-269

TI-2020-15890 CVE-2020-25989 · GHSA-q66j-gj7h-p9hm

LOW 35

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00772 Published 2020-11-19 No fix listed CWE-59

TI-2020-15442 CVE-2020-25200 · GHSA-9gwc-9rcr-pxmc

MEDIUM 40

Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0747 Published 2020-10-01 No fix listed CWE-203

TI-2016-06071 CVE-2016-7064 · GHSA-wc8r-7hj6-v6fg

LOW 34

A flaw was found in pritunl-client before version 1.0.1116.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2020-07-21 No fix listed CWE-347

TI-2016-06070 CVE-2016-7063 · GHSA-5m75-p956-6hmj

MEDIUM 47

A flaw was found in pritunl-client before version 1.0.1116.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02392 Published 2020-07-21 No fix listed CWE-22