CVE-2018-8739

Name of the Vulnerable Software and Affected Versions VPN Unlimited version 4.2.0 for macOS

Description The issue concerns a root privilege escalation in the privileged helper tool of VPN Unlimited. This tool implements an XPC interface, allowing arbitrary applications to execute system commands as root.

Recommendations For VPN Unlimited version 4.2.0, consider disabling the XPC interface in the privileged helper tool until a patch is available to prevent arbitrary system command execution as root.