Client VPN vulnerabilities

2 known vulnerabilities in Client VPN from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Client VPN: Improper Link Resolution Before File Access

  CVE-2025-11462Oct 7, 2025AWS

  Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a no

• 7.8 High severity

  Client VPN: Incorrect Default Permissions

  CVE-2025-8069Jul 23, 2025AWS

  During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitr