Local privilege escalation vulnerability in Mozilla VPN clie… (CVE-2025-5687)

Summary

Local privilege escalation vulnerability in Mozilla VPN clients for macOS v2.27.0 and below.

Original description

The description as published by the source.

A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.
This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.. This vulnerability was fixed in Mozilla VPN 2.28.0 (macOS).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory mozilla.org
report bugzilla.mozilla.org