PT-2026-2393 · Proton Technologies · Protonvpn

Gemreda · Publicado 2026-01-13 · Atualizado 2026-03-02 · CVE-2022-50917

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProtonVPN version 1.26.0

Description ProtonVPN version 1.26.0 has an issue with an unquoted service path in its WireGuard service configuration. This could allow local attackers to potentially run arbitrary code. The issue arises because of the unquoted path, enabling attackers to place malicious executables in specific file system locations. This allows them to gain higher privileges when the service starts.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2022-50917

Produtos afetados

Protonvpn

Referências · 8

• 🔥 https://exploit-db.com/exploits/50837 · Exploit
• https://osv.dev/vulnerability/CVE-2022-50917 · Aviso do Fabricante
• https://t.me/cveNotify/153572 · Publicação no Telegram
• https://t.me/cveNotify/153748 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2011759614908387551 · Publicação no Twitter
• https://vulncheck.com/advisories/protonvpn-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-50917 · Nota de Segurança
• https://protonvpn.com · Nota