Pritunl Client

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pritunl:pritunl-client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPritunl (2fc7ce80-b6c7-5028-9039-7e246f706f73)
ProductPritunl Client (f2c60460-c929-5c26-bd71-bf5fdccc9bc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pritunl/pritunl-client purl2cpe 2026-06-01 10:16:34.319575
pkg:pypi/pritunl-client purl2cpe 2026-06-01 10:16:34.319577

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43917 vulnerable 2026-06-08 07:25:10.471513 Details available
HIGH (8.2)
In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root.
Published: 2025-04-19T00:00:00.000Z
Updated: 2025-04-21T15:13:55.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7064 vulnerable 2026-06-08 05:08:11.687834 Details available
A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage
Published: 2020-07-21T16:56:29.000Z
Updated: 2024-08-06T01:50:46.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7063 vulnerable 2026-06-08 05:08:11.687327 Details available
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation.
Published: 2020-07-21T16:52:17.000Z
Updated: 2024-08-06T01:50:47.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.