CVE-2025-43711 Information

Description

Tunnelblick 3.5beta06 before 7.0 when incompletely uninstalled allows attackers to execute arbitrary code as root (upon the next boot) by dragging a crafted Tunnelblick.app file into /Applications.

Reference

https://tunnelblick.net/cCVE-2025-43711.html https://tunnelblick.net/downloads.html

CNNVD-202507-511 (Published: 2025-07-04)

Share on: