← Back to CVE search

CVE-2026-26422

clash-verge-service-ipc

Description

clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.

CVSS 8.4EPSS 0.164%Risk 0.85
View source
Published
2026-06-06 23:16:43
Affected versions
<2.3.0
Type
Installed app
Last modified
2026-07-23 07:10:00
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H