CVE-2020-27519: Pritunl Pritunl-Client-Electron

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and execute code as root/SYSTEM.

Affected products

• Pritunl Pritunl-Client-Electron: version 1.2.2550.20 only

Published 2021-04-30. Last modified 2026-06-17.