Privilege Escalation Vulnerability in Pritunl Client by Pritunl

CVE-2025-43917

What is CVE-2025-43917?

A privilege escalation vulnerability in Pritunl Client versions prior to 1.3.4220.57 allows an administrator with access to specific application directories to exploit the uninstall process. Once the application is uninstalled, the administrator can inject a file into the location of the removed pritunl-service file. This injected file can be executed with root privileges through a LaunchDaemon, potentially compromising system integrity and security.

References