What is CVE-2025-11462?

CVE-2025-11462 is a high-severity vulnerability in Aws Client Vpn, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2025-10-07.

How severe is CVE-2025-11462?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2025-11462 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Aws Client Vpn

CVE-2025-11462

Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a symlink from a client log file to a privileged location. On log rotation, this could lead to code execution with root privileges if the user made crafted API calls which injected arbitrary code into the log file. We recommend users upgrade to AWS VPN Client for macOS 5.2.1 or the latest version.

EPSS: 0.002 (11.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Aws Client Vpn — versions 1.3.2

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

Public proof-of-concept exploits

thexnumb/thexwriteup

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes, patch)

Frequently asked questions

What is CVE-2025-11462?: CVE-2025-11462 is a high-severity vulnerability in Aws Client Vpn, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2025-10-07.
How severe is CVE-2025-11462?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2025-11462 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.