CVE-2017-20112

CVE-2017-20112 is a critical improper privilege management vulnerability affecting IVPN Client versions prior to 2.6.2. An attacker can exploit this locally by manipulating the "--up cmd" argument, leading to high impact on confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it lacks exploit intelligence in common tools like Metasploit or Nuclei, with minimal community discussion or media coverage.