CVE-2021-22961: Glasswire

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary code execution from a file in the user path on first execution.

Affected products

• Glasswire Glasswire: version 2.1.167 only

Published 2021-10-18. Last modified 2026-06-17.