CVE-2022-25372

CVE-2022-25372 describes a local privilege escalation vulnerability in Pritunl Client for Windows, affecting versions through 1.2.3019.52. This flaw stems from an insecure Access Control List (ACL) entry, specifically for CREATOR OWNER, within the platform_windows.go file. With a CVSS score of 7.8 (HIGH), an attacker with low privileges can exploit this vulnerability locally with low complexity to gain full control over the affected system, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has received some community discussion.