CVE-2025-65199 — Windscribe for Linux 'changeMTU' local privilege escalation
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as ro…
Published: 2025-12-10 · CVSS: 7.3 · CVSS 4.0
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7