NordVPN patches "clumsy" Windows bug that let attackers disable system services
NordVPN has rolled out a fix for a Windows app vulnerability (CVE-2026-106030) that allowed local attackers to interfere with system services. Update to version 8.12 now to stay secure.
A recently discovered flaw in NordVPN's Windows application has been patched by the company to prevent attackers from disabling unprotected system services. The vulnerability, identified as CVE-2026-106030, does not impact users running version 8.12.0.0 or later of NordVPN. Experts describe the flaw as "clumsy," but the real-world danger to users is considered minimal.
The issue stems from the way Windows applications communicate with each other using named pipes, which allowed a local, low-privileged attacker to act as a trusted process and stop unprotected Windows services or change their startup types. While the technical details of the flaw are alarming, with a CVSS v4 base severity score of 6.8, the practical implications for the average user are far less severe.
The vulnerability cannot be exploited remotely over the internet, as the attacker would need to have local access to the user's machine. NordVPN has addressed the issue in version 8.12.0.0, and users are advised to ensure their app is fully up to date.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
