CVE-2020-36992: Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

Published Jan 28, 2026

Updated

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem permissions.

Affected Software

1 affected component

NordVPN Nord VPN

Event History

Jan 28, 2026

CVE Published

via MITRE·12:29 PM

Data Sourced

via MITRE·12:29 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-36992?

CVE-2020-36992 is categorized as a security vulnerability with high severity due to its potential for local code execution with elevated privileges.

How do I fix CVE-2020-36992?

To fix CVE-2020-36992, ensure that the service path for nordvpn-service is properly quoted to prevent exploitation.

Who is affected by CVE-2020-36992?

CVE-2020-36992 affects users of Nord VPN version 6.31.13.0 and potentially earlier versions.

What type of vulnerability is CVE-2020-36992?

CVE-2020-36992 is an unquoted service path vulnerability that allows local attackers to execute code with escalated privileges.

Can CVE-2020-36992 be exploited remotely?

CVE-2020-36992 cannot be exploited remotely, as it requires local access to the affected system.