PT-2026-1436 · Unknown · Airvpn Eddie

CVE-2025-14979

Published

2026-01-06

Updated

2026-03-03

CVSS v4.0

8.5

High

Vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AirVPN Eddie version 2.24.6

Description The software contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

LPE

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-14979

Airvpn Eddie