High severity7.8NVD Advisory· Published Dec 4, 2025· Updated Jun 17, 2026

CVE-2025-66575

Description

VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VeePN/VeePN
cpe:2.3:a:veepn:veepn:1.6.1:*:*:*:*:*:*:*
VeeVPN/VeeVPNllm-create
Range: = 1.6.1
VeeVPN/VeePNServicellm-fuzzy
Range: = 1.6.1
VeePN/VeeVPNv5
Range: 1.6.1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/52088nvdExploit
www.vulncheck.com/advisories/veevpn-161-unquoted-service-path-remote-code-executionnvdThird Party AdvisoryVDB Entry
veepn.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000