WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
CVE-2025-1910

6.3MEDIUM

Key Information:

Vendor

Watchguard

Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
4 December 2025

What is CVE-2025-1910?

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.This issue affects the Mobile VPN with SSL Client 12.0 up to and including 12.11.2.

Affected Version(s)

Mobile VPN with SSL Client Windows 12.0 <= 12.11.2

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AKASEC
JSON
.
CVE-2025-1910 : Privilege Escalation Vulnerability in WatchGuard Mobile VPN Client on Windows