CVE-2025-25364

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges...

CVE-2025-25364

CVE-2025-25364 affects Speedify VPN up to v15.0.0 and is caused by a command injection flaw in the me.connectify.SMJobBlessHelper XPC service. The vulnerability arises from improper input validation in the XPC interface, enabling local privilege escalation to root. PT-Security reports the issue i...