PT-2025-40998 · Unknown · Clash Verge

Bron1E · Published 2025-10-07 · Updated 2026-01-21 · CVE-2025-50505

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Clash Verge versions through 2.2.3

Description The software installs system services (clash-verge-service) by default and exposes functions through an unauthorized HTTP API. Specifically, the /start clash API endpoint allows local users to submit arbitrary bin path parameters. These parameters are directly passed to the service process for execution, potentially leading to local privilege escalation.

Recommendations Update to a version beyond 2.2.3.

Exploit

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-50505

Affected Products

Clash Verge

References · 10

• 🔥 https://github.com/bron1e/CVE-2025-50505 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50505 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50505 · Vendor Advisory
• https://github.com/clash-verge-rev/clash-verge-rev · Note
• https://github.com/cisagov/vulnrichment/issues/206 · Note
• https://github.com/clash-verge-rev/clash-verge-service · Note
• https://t.me/CVEtracker/34319 · Telegram Post
• https://t.me/cveNotify/149392 · Telegram Post
• https://clashverge.dev · Note
• https://twitter.com/CVEnew/status/1975565858450682130 · Twitter Post