Eddie
Monthly
Local privilege escalation in AirVPN Eddie 2.24.6 for macOS lets an unprivileged local user gain root by abusing an insecure XPC helper service. Because the privileged helper exposes its XPC interface without properly validating connecting clients, any local account can invoke privileged operations and elevate to root. No public exploit has been identified at time of analysis and EPSS risk is very low (0.02%), consistent with a local-only, non-remote flaw.
Local privilege escalation in AirVPN Eddie 2.24.6 for macOS lets an unprivileged local user gain root by abusing an insecure XPC helper service. Because the privileged helper exposes its XPC interface without properly validating connecting clients, any local account can invoke privileged operations and elevate to root. No public exploit has been identified at time of analysis and EPSS risk is very low (0.02%), consistent with a local-only, non-remote flaw.