Amazon Web Services has disclosed a critical security vulnerability in its Client VPN software for Windows that could allow attackers to escalate privileges and execute malicious code with administrative rights. The vulnerability, tracked as CVE-2025-8069, affects multiple versions of the AWS Client VPN client and has been patched in the latest release. The flaw specifically targets the installation process on Windows devices, creating a pathway for local privilege escalation attacks that could compromise system security. The vulnerability was discovered and reported by the Zero Day Initiative through a coordinated vulnerability disclosure process.
Source: https://cybersecuritynews.com/aws-client-vpn-for-windows-vulnerability/
TPRM report: https://scoringcyber.rankiteo.com/company/amazon-web-services
"id": "ama353072525",
"linkid": "amazon-web-services",
"type": "Vulnerability",
"date": "7/2025",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"{'affected_entities': [{'industry': 'Technology',
'name': 'Amazon Web Services',
'type': 'Cloud Service Provider'}],
'attack_vector': 'Local Privilege Escalation',
'description': 'A critical security vulnerability (CVE-2025-8069) in AWS '
'Client VPN software for Windows allows attackers to escalate '
'privileges and execute malicious code with administrative '
'rights.',
'impact': {'systems_affected': ['Windows devices running affected versions of '
'AWS Client VPN']},
'initial_access_broker': {'entry_point': 'OpenSSL configuration file path'},
'lessons_learned': 'Importance of responsible security research and prompt '
'patching',
'motivation': 'Privilege Escalation',
'post_incident_analysis': {'corrective_actions': ['Patch the vulnerability by '
'upgrading to version '
'5.2.2'],
'root_causes': 'Design flaw in the AWS Client VPN '
'client installation process on '
'Windows systems'},
'recommendations': ['Upgrade to version 5.2.2 immediately',
'Prioritize updating in shared computing environments'],
'references': [{'source': 'AWS'}],
'response': {'containment_measures': ['Upgrade to version 5.2.2'],
'remediation_measures': ['Patch the vulnerability']},
'title': 'AWS Client VPN Privilege Escalation Vulnerability',
'type': 'Vulnerability Exploitation',
'vulnerability_exploited': 'CVE-2025-8069'}