CVE-2022-23171: Atlasvpn

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed.

Affected products

• Atlasvpn Atlasvpn: from 2.4.0, up to and including 2.4.2

Published 2022-06-21. Last modified 2026-06-17.