Description
A local privilege escalation vulnerability was detected on the Sangfor VDI client. Attackers can escalate privileges by sending a specially crafted message. Sangfor has released a fixed version. Affected users can contact technical support at +60 12 711 7511 (7129) to obtain and install the client upgrade package.
Affected Versions and Remediation Solutions
| Product Name | Affected Versions | Solution |
|---|---|---|
| VDI Client | Only the Windows client of VDI 5.9.8 Beta (client version earlier than 5.9.8.797) | Upgrade the Windows client to version 5.9.8 or another official release version |
Impact
Attackers can exploit this vulnerability in the client to escalate standard user privileges to SYSTEM privileges on the local host machine.
Vulnerability Rating
Base score: 6.3 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Temporal score: 5.9 (E:F/RL:O/RC:C)
The scores are calculated according to the CVSS 3.1 standard. For details, see
https://www.first.org/cvss/calculator/3.1
Vulnerability Details
After obtaining ordinary local user privileges on a PC, an attacker can send a forged inter-process communication request to a local system service through the inter-process communication interface. By exploiting the service's failure to verify the identity of the request sender, the attacker can cause the service to start a specific program with the highest system privileges, and can then use the program's functionality to invoke external commands, so that the commands inherit the highest system privileges and local privilege escalation is achieved.
Risk Prevention Measure
None.
Obtaining the SP
You can obtain the SP by contacting global technical support at +60 12 711 7511 (7129) or [email protected]. You can also contact local technical support to obtain the SP. For contact information, please visit https://www.sangfor.com/support/technical-support
Acknowledgement
This vulnerability was reported to Sangfor by Michael Cheung (Security Testing & Assessment Group, HKEX) through a responsible vulnerability disclosure process. We would like to express our gratitude.
Disclaimer
Any software or service packs referred to on this page is the copyrighted work of Sangfor and/or its suppliers. Except for the purpose of vulnerability fixing, you may not further copy, modify, distribute, publish, license, transfer, sell, or attempt to extract the source code of the software or service pack by decompilation or other means.
This document does not provide any express, implied, or statutory warranties, including but not limited to warranties of merchantability, fitness, and non-infringement. Under no circumstances shall Sangfor Technologies or its direct or indirect subsidiaries be liable for any damages, including direct, indirect, incidental, or consequential loss of business profits and special damages. You shall assume any legal liability arising from your use of this document in any manner. Sangfor reserves the right to modify or update the content and information of this document at any time.
Update History
2026-10-10 V1.0 First release.