CVE-2025-25364

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges...

CVE-2025-25364

A command injection vulnerability exists in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN versions up to 15.0.0 . The root cause is improper input validation within the XPC interface of the helper tool, specifically affecting the cmdPath and cmdBin fields. Successful exploitation...