Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by mitre

CVE-2025-59692

Low 3.7

In plain English

A low-severity security flaw in PureVPN from PureVPN. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.2%top 89.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software (e.g., UFW, container engines, or system security policies). Upon VPN disconnect, the original firewall state is not restored. As a result, the system may become unintentionally exposed to network traffic that was previously blocked. This affects CLI 2.0.1 and GUI 2.10.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-59692
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-59692
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2025-59692
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-59692

Affected products (as reported)

VendorProductVersions
PureVPN PureVPN CLI 2.0.1GUI 2.10.0

Weakness: CWE-669 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

References