Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-2638

X-VPN macOS website versions - Local Privilege Escalation

Description

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

X-VPN X-VPN macOS website

Default version status: unaffected

  • 77.0 to ≤ 77.5affected

References