← Database

CVE-2022-40126

HIGH CVSS: 7.8 Published: 2022-09-29 Modified: 2026-06-17

Description

A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.

Affected Platforms

Clash Project Clash

Weakness Type

CWE-552, CWE-552

References