CVE-2025-43711 — Tunnelblick Project / Tunnelblick

CVE-2025-43711

Tunnelblick Project / Tunnelblick PUBLISHED

Description (CNA)

Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upon the next boot) by dragging a crafted Tunnelblick.app file into /Applications.

Affected (CNA)

Vendor / product	Versions
Tunnelblick Project / Tunnelblick	affected 3.5beta06 before 7.0

CWE

CWE-459

References

https://tunnelblick.net/downloads.html
https://tunnelblick.net/cCVE-2025-43711.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.