CVE-2025-25364

A command injection vulnerability exists in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN (versions up to v15.0.0 ). The flaw is caused by improper input validation within the XPC interface, specifically in the cmdPath and cmdBin fields. Attackers can exploit this to execute arbi...