Security risk - CVE-2025-14979 - 20260122 Eddie 2.24.6

[klc 0]

Hey AirVPN / community.

I saw this CVE (CVE-2025-14979) vulnerability from Jan 2026 on FluidAttacks for a CVE with huge security implications... this is related to the current stable version: 2.24.6. Here's the links where it's listed and it's in NVD too as you can see:
https://fluidattacks.com/advisories/blink182
https://nvd.nist.gov/vuln/detail/CVE-2025-14979
https://www.sentinelone.com/vulnerability-database/cve-2025-14979/

The only fix available on the website download area or GitHub is to move to experimental release but this could contain the same vulnerabilities.

Anyone going to fix this for your paying customers?

[Staff 10578]

4 hours ago, klc said:

The only fix available on the website download area or GitHub is to move to experimental release

Hello!

Yes, please do it. Currently the software is in public beta testing and is already quite solid.
 

4 hours ago, klc said:

this could contain the same vulnerabilities.

No, we can re-assure you that it doesn't. All the vulnerabilities (including, but not limited to, the one you mention on macOS) have been fixed, see the changelog:
https://airvpn.org/forums/topic/80641-eddie-desktop-edition-226-beta-released/

A stable version is expected very soon.

Kind regards