CVE-2021-31776: Aviatrix VPN Client

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

Affected products

• Aviatrix VPN Client: before 2.14.14 (fixed in 2.14.14)

Published 2021-04-29. Last modified 2026-06-17.