CVE-2025-14979

Published January 6th, 2026

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

AirVPN Eddie on MacOS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects Eddie: 2.24.6.

AirVPN/Eddie

UI/CLI for OpenVPN/WireGuard

GitHub

389