High severity · published Jul 23, 2025
CVE-2025-8069
Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If an admin user starts the AWS Client VPN client installation process, that code could be executed with root-level privileges. This issue does not affect Linux or Mac devices.
We recommend users discontinue any new installations of AWS Client VPN on Windows prior to version 5.2.2.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CV
Client VPN · AWS
4.1.0; 5.0.0 before 5.2.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8069
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8069
aws.amazon.com
https://aws.amazon.com/security/security-bulletins/AWS-2025-014/
docs.aws.amazon.com
https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows-release-notes.html
More from Client VPN
7.8
CVE-2025-11462
Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client