CVE-2018-8739: Keepsolid VPN Unlimited

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root.

Affected products

  • Keepsolid VPN Unlimited: before 4.2.0 (fixed in 4.2.0)

Published 2018-03-16. Last modified 2026-06-17.