AWS Client VPN for macOS Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the AWS VPN Client for macOS, affecting versions 1.3.2 through 5.2.0. The issue arises from improper validation of the log destination directory during log rotation, which could allow a non-administrator user to create a symbolic link from a client log file to a privileged location. If the user then made crafted API calls that injected arbitrary code into the log file, this could be executed with root privileges upon log rotation. This vulnerability does not affect the Windows or Linux versions of the AWS VPN Client.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with root privileges on the affected macOS system.

Remediation

Users are advised to upgrade to AWS VPN Client for macOS version 5.2.1 or the latest version available.