Privilege Escalation Vulnerability in WatchGuard Mobile VPN Client on Windows
CVE-2025-1910

6.3MEDIUM

Key Information:

Vendor

Watchguard

Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
4 December 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-1910?

The WatchGuard Mobile VPN with SSL Client for Windows contains a vulnerability that allows locally authenticated non-administrative users to elevate their privileges to NT AUTHORITY/SYSTEM. This flaw impacts versions from 12.0 to 12.11.2, posing a significant risk to systems with this software installed. Users should update to the latest version or apply mitigations as recommended by the vendor to secure their devices.

Affected Version(s)

Mobile VPN with SSL Client 11.0 < 12.11.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-1910-WatchGuard-Privilege-Escalation
Created by lutrasecurity

References

https://psirt.watchguard.com/CVE-2025-1910
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

AKASEC
.