CVE-2020-10588

HIGH 7.8CVE-2020-10588 · Published 15/03/2020 · updated 17/06/2026

In short

CVE-2020-10588 is a HIGH (CVSS 7.8) vulnerability affecting v2rayl (v2rayl project).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
v2rayl v2rayl_project	`= 2.1.3`	No fix yet

Description

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo.

References

gist.github.com/bash-c/6ac238e8b15e60c9105e8cb6b42ec43c · Exploit

More vulnerabilities in v2rayl

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free