A vulnerability classified as critical has been found in SparkLabs Viscosity up to 1.11.4 on macOS. Affected is an unknown function of the component viscosity_openvpn. The manipulation leads to incorrect default permissions.

This vulnerability is traded as CVE-2025-4412. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.