CVE-2025-50505

CVE-2025-50505 Unauthorized API Leads to Arbitrary Command Execution and Privilege Escalation in Clash Verge Rev Description The vulnerability stems from an unauthenticated API endpoint exposed by the clash-verge-service component, which is installed with elevated privileges by default. This flaw...