PT-2026-1436 · Unknown · Airvpn Eddie

Oscar Uribe · Publicado 2026-01-06 · Atualizado 2026-03-03 · CVE-2025-14979

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AirVPN Eddie version 2.24.6

Description The software contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

LPE

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2025-14979

Produtos afetados

Airvpn Eddie

Referências · 10

• 🔥 https://fluidattacks.com/advisories/blink182 · Exploit
• https://github.com/AirVPN/Eddie · Nota
• https://t.me/cveNotify/153990 · Publicação no Telegram
• https://airvpn.org/forums/topic/79305-eddie-desktop-edition-225-beta-released · Correção
• https://twitter.com/CVEnew/status/2008565817148088639 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2008696756284842123 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14979 · Nota de Segurança
• https://twitter.com/fluidattacks/status/2028950040127918408 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-14979 · Aviso do Fabricante
• https://eddie.website · Nota