CVE-2020-10589

v2rayL 2.1.3 contains a local privilege escalation: /etc/v2rayL/config.json is owned by a low-privilege user but includes commands executed as root when v2rayL.service is restarted via sudo. This enables local users to gain root access. Documented impact is root with local access; exploitation de...

CVE-2020-10588

CVE-2020-10588 affects v2rayL 2.1.3 on Linux. The vulnerability arises because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privilege user but are executed as root via sudo, enabling local users to escalate to root. The Red Hat and CNVD entries confirm the same root-privilege e...