PT-2025-41169 · Amazon Web Services · Aws Vpn Client For Macos

Published 2025-10-07 · Updated 2025-11-14 · CVE-2025-11462

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AWS VPN Client for macOS versions 1.3.2 through 5.2.0

Description A flaw exists in the AWS VPN Client for macOS that allows a local user to execute code with elevated privileges. Insufficient validation of the log destination directory during log rotation can allow a non-administrator user to create a symbolic link from a client log file to a privileged location. During log rotation, this could lead to code execution with root privileges if the user makes crafted API calls to inject arbitrary code into the log file. The issue involves improper link resolution before file access.

Recommendations Upgrade to AWS VPN Client for macOS version 5.2.1 or the latest version.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2025-13127

CVE-2025-11462

Affected Products

Aws Vpn Client For Macos

References · 18

• https://aws.amazon.com/vpn/client-vpn-download · Patch
• https://aws.amazon.com/security/security-bulletins/AWS-2025-020 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13127 · Security Note
• https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos-release-notes.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-11462 · Security Note
• https://twitter.com/Komodosec/status/1989363331313152246 · Twitter Post
• https://t.me/cveNotify/138627 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1975839345069232462 · Twitter Post
• https://twitter.com/CVEnew/status/1975656489311260808 · Twitter Post
• https://twitter.com/0dayPublishing/status/1975650855819817101 · Twitter Post
• https://twitter.com/autumn_good_35/status/1976266131070656954 · Twitter Post
• https://t.me/pentestingnews/69246 · Telegram Post
• https://twitter.com/PurpleOps_io/status/1976181280749363493 · Twitter Post
• https://twitter.com/CCBalert/status/1975944098923119102 · Twitter Post
• https://twitter.com/dailytechonx/status/1976411097637732724 · Twitter Post