CVE-2025-11130

Name of the Vulnerable Software and Affected Versions iHongRen pptp-vpn versions 1.0 and 1.0.1

Description A security issue has been identified in iHongRen pptp-vpn on macOS. The problem resides in the shouldAcceptNewConnection function within the HelpTool/HelperTool.m file of the XPC Service component, leading to missing authentication. This allows local attackers to bypass authentication mechanisms. The exploit for this issue is publicly available. The vendor was informed of this issue but did not provide a response.

Recommendations For iHongRen pptp-vpn version 1.0, restrict access to the vulnerable component XPC Service. For iHongRen pptp-vpn version 1.0.1, restrict access to the vulnerable component XPC Service.