Ixon Vpn Client
Monthly
Privilege escalation to root/SYSTEM in IXON VPN Client before 1.4.7 lets an attacker inject arbitrary configuration directives via a CRLF (improper neutralization, CWE-93) flaw: the client's local configuration interface accepts changes without authenticating or verifying the requester's origin, writes those values to a file, and a privileged subprocess later consumes them. By embedding line-ending sequences the attacker smuggles additional directives that run with elevated privileges. Because the malicious config persists across client restarts and OS reboots while the VPN keeps functioning normally, the compromise is stealthy with no user-visible change. No public exploit identified at time of analysis; no CISA KEV listing.
Privilege escalation to root/SYSTEM in IXON VPN Client before 1.4.7 lets an attacker inject arbitrary configuration directives via a CRLF (improper neutralization, CWE-93) flaw: the client's local configuration interface accepts changes without authenticating or verifying the requester's origin, writes those values to a file, and a privileged subprocess later consumes them. By embedding line-ending sequences the attacker smuggles additional directives that run with elevated privileges. Because the malicious config persists across client restarts and OS reboots while the VPN keeps functioning normally, the compromise is stealthy with no user-visible change. No public exploit identified at time of analysis; no CISA KEV listing.