Privilege Escalation Vulnerability in Mozilla VPN for macOS

CVE-2025-5687

What is CVE-2025-5687?

A vulnerability in Mozilla VPN on macOS allows a normal user to escalate their privileges to that of the root user. This issue impacts versions of Mozilla VPN prior to 2.28.0, and poses a security risk by enabling malicious actors to gain unauthorized access to sensitive system resources. It's important to note that this vulnerability is specific to the macOS version of the VPN, leaving other operating systems unaffected. Users of the affected version are advised to apply available updates promptly to mitigate potential risks.

References