CVE-2026-26422: Clash Verge Rev Clash-Verge-Service-Ipc

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.

Affected products

• Clash Verge Rev Clash-Verge-Service-Ipc: before 2.3.0 (fixed in 2.3.0)

Published 2026-06-06. Last modified 2026-07-23.