{
  "id": 15725398,
  "title": "NordVPN patches \"clumsy\" Windows bug that let attackers disable system services",
  "url": "https://urgent.news/2026/10/20/nordvpn-patches-clumsy-windows-bug-that-let-attackers-disable-system",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-20T09:11:25.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/vpn/vpn-services/nordvpn-patches-clumsy-windows-bug-that-let-attackers-disable-system-services"
  },
  "original_language": "en",
  "account": "A recently discovered flaw in NordVPN's Windows application has been patched by the company to prevent attackers from disabling unprotected system services. The vulnerability, identified as CVE-2026-106030, does not impact users running version 8.12.0.0 or later of NordVPN. Experts describe the flaw as \"clumsy,\" but the real-world danger to users is considered minimal. The issue stems from the way Windows applications communicate with each other using named pipes, which allowed a local, low-privileged attacker to act as a trusted process and stop unprotected Windows services or change their startup types. While the technical details of the flaw are alarming, with a CVSS v4 base severity score of 6.8, the practical implications for the average user are far less severe. The vulnerability cannot be exploited remotely over the internet, as the attacker would need to have local access to the user's machine. NordVPN has addressed the issue in version 8.12.0.0, and users are advised to ensure their app is fully up to date.",
  "summary": "NordVPN has rolled out a fix for a Windows app vulnerability (CVE-2026-106030) that allowed local attackers to interfere with system services. Update to version 8.12 now to stay secure.",
  "key_points": [
    "NordVPN patches Windows bug allowing attackers to disable system services.",
    "Vulnerability CVE-2026-106030 affects older NordVPN versions.",
    "Issue stems from Windows named pipe communication flaw."
  ],
  "editors_take": "This vulnerability highlights how flaws in inter-process communication can allow local attackers to manipulate system services, though the lack of remote exploitability limits the immediate threat to the average user.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}