← All Advisories

Forcepoint VPN Client Excessive-Privilege Execution Scores 7.8

Last refreshed2026-09-26

Status: UPDATED  |  Advisory ID: CVE-2025-12694

Key Details

CVECVE-2025-12694
CVSS Score / Version7.8 (High) / CVSS v3.1
Updated2026-09-24
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Proseattack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected productsForcepoint VPN Client
Classified asCWE-250 (Execution with Unnecessary Privileges)
Exploitation prediction (EPSS)0.10% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
ForcepointVPN Client
SubsystemsGeneral OT
SectorsMultiple

What to Know

A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.

What to Do

Monitor Forcepoint's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-12694
CVEhttps://www.cve.org/CVERecord?id=CVE-2025-12694
Vendor advisoryhttps://support.forcepoint.com/s/article/Security-Advisory-Local-Privilege-Escalation-in-VPN-Client-for-Windows