Private Internet Access vulnerabilities
We track 2 vulnerabilities in Private Internet Access products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Private Internet Access vulnerabilities
- 7.5 High severity
Firefox extension: Improper Authentication
The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in vers
- 8.4 High severity
Private Internet Access: Unquoted Search Path or Element
Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious