PT-2026-5808 · Bartvpn · Bartvpn

Published 2026-02-04 · Updated 2026-02-05 · CVE-2019-25275

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BartVPN version 1.2.2

Description BartVPN version 1.2.2 has an unquoted service path issue in the BartVPNService. This allows local attackers to potentially run arbitrary code with higher system rights. Attackers can take advantage of the unquoted binary path by putting malicious executables in certain file system locations to take control of the service’s execution environment.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the BartVPNService to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25275

Affected Products

Bartvpn

References · 5

• 🔥 https://exploit-db.com/exploits/47675 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25275 · Security Note
• https://t.me/CVEtracker/43778 · Telegram Post
• https://filehorse.com · Note
• https://vulncheck.com/advisories/bartvpn-bartvpnservice-unquoted-service-path · Note