Vulnerability Spotlight: Multiple vulnerabilities in Shimo VPN's helper tool

Summary: Cisco Talos disclosed six vulnerabilities in the Shimo VPN Helper Tool for macOS, tracked as TALOS-2018-0673 through TALOS-2018-0678 and CVE-2018-4004 through CVE-2018-4009, all requiring local access to the machine. The flaws include privilege escalation to root in the configureRoutingWithCommand, writeConfig, RunVpncScript and code-signing validation functions, a non-root user's ability to kill privileged processes via disconnectService, and deletion of any protected file via deleteConfig. The vulnerabilities were released without a patch after repeated attempts to contact the vendor.
Why it matters: Six local privilege-escalation flaws in a VPN client's privileged helper tool shipped with no patch, so anyone with a foothold on a Mac running Shimo VPN 4.1.5.1 has a documented path to root.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-4004 CVE-2018-4005 CVE-2018-4006 CVE-2018-4007 CVE-2018-4008 CVE-2018-4009
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026