Description

A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.

INFO

Published Date :

2025-12-10T18:04:35.733Z

Last Modified :

2025-12-18T19:54:18.428Z

Source :

cisa-cg
AFFECTED PRODUCTS

The following products are affected by CVE-2025-65199 vulnerability.

Vendors Products
Linux
  • Linux
Windscribe
  • Windscribe
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-65199.

URL Resource
https://github.com/Windscribe/Desktop-App cve-icon cve-icon
https://github.com/Windscribe/Desktop-App/compare/v2.18.2...v2.18.3?diff=unified&w#diff-57e27ab201a1a612609087b839e03bf87a5a063ffcc3f465a6245469bc102754 cve-icon cve-icon
https://github.com/Windscribe/Desktop-App/compare/v2.18.2...v2.18.3?diff=unified&w#diff-cfc5df17057ed92112ae70a42c81c57c79f434429210ff881fb0771cf8e39b4c cve-icon cve-icon
https://hackingbydoing.wixsite.com/hackingbydoing/post/windscribe-vpn-local-privilege-escalation cve-icon cve-icon
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-343-01.json cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-65199 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact