CVE-2025-1549: WatchGuard Mobile VPN with SSL Local Privilege Escallation

Severity: medium (CVSS 6.3 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-29 · updated 2026-10-08
Weakness: CWE-77

Description

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5

Affected products

WatchGuard Mobile VPN with SSL Client: from 12.0 before 12.11.3 — fixed in 12.11.3

How to fix

Upgrade to a fixed version: WatchGuard Mobile VPN with SSL Client 12.11.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-1549 or the next vulnerability affects your stack