Vulnerabilities > Clash Project > Clash > 0.19.9

DATE CVE VULNERABILITY TITLE RISK
2022-09-29 CVE-2022-40126 Files or Directories Accessible to External Parties vulnerability in Clash Project Clash 0.19.9
A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.
local
low complexity
clash-project CWE-552
7.8