CVE-2025-8069 | Amazon AWS Client VPN up to 5.2.1 on Windows OpenSSL Configuration File default permission (AWS-2025-014)

July 23, 2025 Yanac

A vulnerability was found in Amazon AWS Client VPN up to 5.2.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component OpenSSL Configuration File Handler. The manipulation leads to incorrect default permissions.

This vulnerability was named CVE-2025-8069. Attacking locally is a requirement. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More