Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path | Advisories

Advisories

Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

severity: high
date: January 28, 2026
Affecting: nordvpn 6.31.13.0
CVE: CVE-2020-36992
CWE: CWE-428 Unquoted Search Path or Element
CVSS: 8.5
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-48790
NordVPN Official Homepage
Credit: chipo
Description: Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem permissions.