CVE-2026-26422
World-Readable IPC Endpoint Enables Local Privilege Escalation in Clash Verge Service
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
CVSS 3.1 · 8.4 High
EPSS < 1%
KEV · Not listed
Vendors
Products