Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by mitre

CVE-2025-59691

Low 3.7

In plain English

A low-severity security flaw in PureVPN from PureVPN. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.2%top 87.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In the GUI client, the IPv6 connection remains functional after disconnection until the user clicks Reconnect. In both cases, the real IPv6 address is exposed to external services, violating user privacy and defeating the advertised IPv6 leak protection. This affects CLI 2.0.1 and GUI 2.10.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-59691
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-59691
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2025-59691
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-59691

Affected products (as reported)

VendorProductVersions
PureVPN PureVPN CLI 2.0.1GUI 2.10.0

Weakness: CWE-669 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References