Windscribe vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Windscribe products: 1 record(s), with severity, exploitation and fixes.

Windscribe 1 Windscribe for Linux Desktop App 1

Exploited only (KEV) →

CVE-2025-65199 High · 7.8 CWE-78 Dec 10, 2025

Windscribe for Linux 'changeMTU' local privilege escalation

A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.