IXON VPN Client Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the IXON VPN Client for Linux and macOS, prior to version 1.4.4. The issue arises from code execution allowed by a configuration file that can be manipulated by a low-privileged user. This vulnerability is exacerbated by a race condition, where a temporary configuration file in a world-writable directory can be overwritten, leading to unauthorized escalation of privileges to root.

Impact

Exploitation of this vulnerability allows a low-privileged user to gain root privileges on the affected system.