AWS patched a Critical (CVSS 9.3) local flaw (CVE-2025-11462) in its Client VPN for macOS. A non-admin user can gain root privileges via a symlink manipulation attack.
Client VPN
These updated versions contain fixes for both CVE-2024-30164 and CVE-2024-30165, effectively closing the security gaps