CVE-2026-75925: CWE-93 in IXON IXON VPN Client

The vulnerability arises from improper neutralization of CRLF sequences in the IXON VPN Client's configuration handling. Configuration values accepted by the local service are written to a file used by a privileged subprocess without sanitizing line-ending sequences, allowing injection of additional commands. The configuration interface accepts changes without authentication or origin verification, enabling attackers to inject malicious directives that execute with root or SYSTEM privileges. These injected configurations persist on disk and survive restarts, while the VPN connection continues to operate normally, making detection difficult.

Successful exploitation allows an attacker to execute arbitrary commands with root or SYSTEM privileges on the affected system. This can lead to full system compromise, data loss, or further lateral movement. The persistence of injected configurations across restarts and the lack of visible changes to VPN functionality increase the risk of undetected compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the configuration interface to trusted users only and monitor for unauthorized configuration changes. Because the interface does not authenticate requests, network-level controls to limit access are critical.