CVE-2025-8069

Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client

State: Published
Severity: 7.3 High
Published: Jul 23, 2025
Updated: Oct 14, 2025
Reserved: Jul 22, 2025

Description

During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If an admin user starts the AWS Client VPN client installation process, that code could be executed with root-level privileges. This issue does not affect Linux or Mac devices.

We recommend users discontinue any new installations of AWS Client VPN on Windows prior to version 5.2.2.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	AMZN
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	AMZN

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
Client VPNAWS	4.1.0Affected 5.0.0 to before 5.2.2Affected

References

https://aws.amazon.com/security/security-bulletins/AWS-2025-014/vendor-advisory
https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows-release-notes.htmlpatchrelease-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.