Status: UPDATED | Advisory ID: CVE-2025-12694
| CVE | CVE-2025-12694 |
| CVSS | CVSS 7.8 (High). |
| Affected products | Forcepoint vpn_client |
| Classified as | CWE-250 (Execution with Unnecessary Privileges) |
A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2025-12694 |
| Vendor advisory | https://support.forcepoint.com/s/article/Security-Advisory-Local-Privilege-Escalation-in-VPN-Client-for-Windows |