A command injection vulnerability in the Windscribe Linux Desktop App permits local users with specific group permissions to escalate privileges to root, posing a critical security risk.

The application utilizes an insecure command execution function that fails to properly sanitize input before passing it to the system shell. A local attacker who is a member of the windscribe group can inject shell metacharacters into the adapterName parameter of the changeMTU function, resulting in arbitrary command execution with root privileges.

The ability for a local user to escalate privileges to root represents a total compromise of the affected host system. This vulnerability allows an attacker to bypass all OS-level access controls, potentially leading to unauthorized data exfiltration, installation of persistent backdoors, or complete system takeover. Given the CVSS score of 7.8, this flaw is considered high severity due to the potential for full administrative control over the underlying Linux environment.

Immediate Action: Update the Windscribe Linux Desktop App to version 2.18.3-alpha or 2.18.8 or later to incorporate the necessary input sanitization and secure command handling.

Proactive Monitoring: Review system logs for unusual process execution patterns or the creation of unexpected SUID binaries in temporary directories such as /tmp.

Compensating Controls: Restrict membership of the windscribe group to only essential users and ensure that the /var/run/windscribe/helper.sock file permissions are strictly audited to prevent unauthorized access.

Public Exploit Available: Yes, a proof-of-concept exploit was published by the vulnerability researcher in their technical write-up.

Organizations utilizing Windscribe on Linux must prioritize this update, as it provides a direct path to root-level access for local attackers. Administrators should verify the current version of the application across all Linux workstations and apply the vendor patch immediately to mitigate the risk of privilege escalation.