Bitmask Access Control Error Vulnerability

Bitmask is an open source application that provides simple and secure encrypted communication via VPN.An access control error vulnerability exists in Bitmask Riseup VPN, which stems from a failure to properly handle ACLs when the product is installed in a non-default directory.An attacker could trick a highly privileged user into executing and gaining administrator privileges by replacing the VPN executable.