CVE-2018-4010: Protonvpn

High severity, CVSS 7.8. EPSS: 5% chance of exploitation in the next 30 days.

An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.

Affected products

• Protonvpn Protonvpn: version 1.5.1 only

Published 2018-09-07. Last modified 2026-06-17.