CVE-2025-1910#

WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package

Medium 6.3 CVSS v4.0 › Published 2025-12-04Updated 2026-08-08

Summary #

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.

Product status #

Product	Affected	Not affected
Mobile VPN with SSL Client	>= 11.0, < 12.11.3	>= 12.11.3

Weakness Type and Impact #

CWECWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPECCAPEC-233Privilege Escalation

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

Mobile VPN with SSL Client 12.11.3

References #

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00008

Credits #

AKASECfinder