CVE-2025-25364

High · 8.4

CVSS

8.4

EPSS

0.9%

Published

Dec 23, 2025

CISA due date

—

The record

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges.

Affected packages

Ecosystem	Package	Introduced	Fixed