CVE-2020-15261

On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.

• CWE-428

• http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1Patch, Third Party Advisory
• https://github.com/veyon/veyon/issues/657Issue Tracking, Third Party Advisory
• https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqpThird Party Advisory
• https://www.exploit-db.com/exploits/48246Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49925Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1Patch, Third Party Advisory
• https://github.com/veyon/veyon/issues/657Issue Tracking, Third Party Advisory
• https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqpThird Party Advisory
• https://www.exploit-db.com/exploits/48246Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49925Exploit, Third Party Advisory, VDB Entry

Published

Oct 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15256A prototype pollution vulnerability has been found in `objec…9.8
• CVE-2020-15257containerd is an industry-standard container runtime and is …5.2
• CVE-2020-15258In Wire before 3.20.x, `shell.openExternal` was used without…8
• CVE-2020-15259ad-ldap-connector's admin panel before version 5.0.13 does n…8.8
• CVE-2020-1526An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15260PJSIP is a free and open source multimedia communication lib…6.8
• CVE-2020-15262In webpack-subresource-integrity before version 1.5.1, all d…3.7
• CVE-2020-15263In platform before version 9.4.4, inline attributes are not …6.1
• CVE-2020-15264The Boxstarter installer before version 2.13.0 configures C:…7.8
• CVE-2020-15265In Tensorflow before version 2.4.0, an attacker can pass an …7.5
• CVE-2020-15266In Tensorflow before version 2.4.0, when the `boxes` argumen…7.5
• CVE-2020-15269In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired u…9.1