[GH-ISSUE #1370] Security issue, unquoted service path in AmneziaVPN-service #554

New issue

Open

opened 2026-10-13 20:24:02 +00:00 by bsakaguchi · 1 comment

bsakaguchi commented

2026-10-13 20:24:02 +00:00

Owner

Originally created by @mikas-khb on GitHub (Jan 20, 2025).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/1370

Привет.
классический "unquoted service path" https://attack.mitre.org/techniques/T1574/009/

PathName DisplayName Name

C:\Program Files\AmneziaVPN\AmneziaVPN-service.exe AmneziaVPN-service AmneziaVPN-service

ImagePath нужно заключить в кавычки

Originally created by @mikas-khb on GitHub (Jan 20, 2025). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/1370 Привет. классический "unquoted service path" https://attack.mitre.org/techniques/T1574/009/ PathName DisplayName Name C:\\Program Files\AmneziaVPN\AmneziaVPN-service.exe AmneziaVPN-service AmneziaVPN-service ImagePath нужно заключить в кавычки

bsakaguchi commented

2026-10-13 20:24:03 +00:00

Author

Owner

@0x73unflower commented on GitHub (Dec 12, 2025):

Still present in the most recent version—4.8.10.0—being served on Amnezia's download page.

@0x73unflower commented on GitHub (Dec 12, 2025): Still present in the most recent version—4.8.10.0—being served on Amnezia's [download page](https://amnezia.org/downloads).

bsakaguchi referenced this issue

2026-10-13 21:16:41 +00:00

[PR #554] [CLOSED] Block traffic between users via wg0 interface #1912