The WatchGuard Mobile VPN with SSL Client for Windows contains a vulnerability (CVE-2025-1910) classified as CWE-77, which enables a locally authenticated user without administrative rights to escalate their privileges to the highest system level (NT AUTHORITY/SYSTEM). This vulnerability arises from improper handling of special elements in commands, allowing privilege escalation on the host machine where the VPN client is installed. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no user interaction, but privileges are required initially. The vulnerability affects versions 11.0 and 12.0 of the product. No official patch or remediation guidance is currently available.

A local non-administrative user on a Windows machine with the WatchGuard Mobile VPN with SSL Client installed can escalate their privileges to NT AUTHORITY/SYSTEM. This grants the attacker full control over the system, potentially allowing them to execute arbitrary code, modify system settings, and access sensitive data. The impact is significant on affected systems but requires local access and existing user privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts on affected systems.