← CVE Intelligence

CVE-2025-43917

Pritunl / Pritunl-Client PUBLISHED

Description (CNA)

In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root.

Affected (CNA)

Vendor / productVersions
Pritunl / Pritunl-Clientaffected 0 before 1.3.4220.57

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.