CVE-2025-43711

—

CVSS 3.1

8.1 high

EPSS

<1%p5

Published

Jul 5, 2025 (Jul 5, 2025)

Modified

Jun 17, 2026

Description

Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upon the next boot) by dragging a crafted Tunnelblick.app file into /Applications.

Weakness: CWE-459
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.