PT-2025-30596 · Amazon Web Services+1 · Aws Client Vpn+1

Published 2025-07-23 · Updated 2025-10-14 · CVE-2025-8069

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AWS Client VPN versions prior to 5.2.2

Description During the installation process on Windows devices, the AWS Client VPN client references a specific directory (C:usrlocalwindows-x86 64-openssl-localbuildssl) to retrieve the OpenSSL configuration file. This allows a non-administrator user to potentially place arbitrary code within this configuration file. Subsequently, if an administrator user initiates the AWS Client VPN client installation, this code could be executed with elevated privileges. This issue does not impact Linux or Mac operating systems.

Recommendations Discontinue any new installations of AWS Client VPN on Windows versions prior to 5.2.2.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-8069

ZDI-25-646

Affected Products

Aws Client Vpn

Openssl

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2025-8069 · Security Note
• https://aws.amazon.com/security/security-bulletins/AWS-2025-014 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-646 · Security Note
• https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows-release-notes.html · Patch
• https://t.me/pentestingnews/65070 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1948057160530727292 · Twitter Post
• https://twitter.com/CybernalytixLtd/status/1948676769390944435 · Twitter Post
• https://t.me/CVEtracker/28510 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1948083258295546015 · Twitter Post
• https://twitter.com/abi65g/status/1948645165289128201 · Twitter Post
• https://twitter.com/fridaysecurity/status/1948234309644542151 · Twitter Post
• https://twitter.com/rewterz/status/1948627402550108463 · Twitter Post
• https://twitter.com/CrowdCyber_Com/status/1948512792094355471 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1948234143835267311 · Twitter Post
• https://twitter.com/tamosan/status/1949621397908815975 · Twitter Post