EUVD-2025-32865

Clash Verge Rev thru 2.2.3 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for execution,...