CVE-2025-25364

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges...

CVE-2025-25364

A command injection vulnerability exists in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN (versions up to v15.0.0 ). The flaw is caused by improper input validation within the XPC interface, specifically in the cmdPath and cmdBin fields. Attackers can exploit this to execute arbi...