CVE-2025-1549#

WatchGuard Mobile VPN with SSL Local Privilege Escallation

Medium 6.3 CVSS v4.0 › Published 2025-10-29Updated 2026-08-10

Summary #

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.

This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5

Product status #

Product	Affected	Not affected
Mobile VPN with SSL Client	>= 12.0, < 12.11.3	>= 12.11.3

Weakness Type and Impact #

CWECWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPECCAPEC-233Privilege Escalation

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

This vulnerability was partially mitigated in 12.11.3 but the Mobile VPN with SSL Client application remains vulnerable to some attack paths.

References #

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00016

Credits #

Defence Tech Malware Lab finder