Local Privilege Escalation Vulnerability in IXON VPN Client for Linux and macOS

CVE-2025-26168

What is CVE-2025-26168?

The IXON VPN Client prior to version 1.4.4 on Linux and macOS is susceptible to a Local Privilege Escalation vulnerability. This issue arises from executable code being included in a configuration file that can be manipulated by low-privileged users. A critical flaw exists due to a race condition, where a temporary configuration file within a world-writable directory can be rewritten, enabling unauthorized access to root privileges.

References