High severity7.8NVD Advisory· Published Dec 20, 2017· Updated May 13, 2026
CVE-2017-17809
CVE-2017-17809
Description
In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forcing the VyprVPN application to load a malicious dynamic library every time a new connection is made.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/VerSprite/research/blob/master/advisories/VS-2017-007.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.