New vulnerability report from Talos:

Norton Secure VPN Installation Insecure Operation On Junction Privilege Escalation Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2276

CVE-2025-58074

@talosvulns

during the installation

Aren't pretty much all installers vulnerable in some way during the installation process?

@wdormann @talosvulns Not normally – this specific installer reads and deletes files and folders from world-writable locations (and follows directory junctions, which can be created by unprivileged users).