Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
🚨 HIGH: CVE-2025-65199 (CVSS 7.8) - Command injection in Windscribe Linux Desktop App allows local privilege escalation to root. Affects users in windscribe group. Fixed in v2.18.3-alpha & v2.18.8. Update immediately. #CVE #Vulnerability #PatchNow https://t.co/UTHeCUM4sF
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | windscribe | windscribe | - | linux | - |
| App | windscribe | windscribe | 2.18.1 | linux | - |
| App | windscribe | windscribe | 2.18.3 | linux | - |
| App | windscribe | windscribe | 2.18.5 | linux | - |