CVE-2026-75925

Name of the Vulnerable Software and Affected Versions IXON VPN Client versions prior to 1.4.7

Description An improper CRLF (Carriage Return Line Feed) sequence neutralization flaw allows unauthenticated local attackers to execute commands with root or SYSTEM privileges. The issue exists in a configuration interface that accepts changes without verifying the requester's identity. By manipulating configuration files processed by privileged subprocesses, attackers can achieve remote code execution. Injected commands persist across client and operating system restarts without visible behavioral changes to the user.

Recommendations Update IXON VPN Client to version 1.4.7 or later.