NordVPN fixes Windows flaw that could disrupt system services

Nord Security has released an update for its Windows application to fix a vulnerability tracked as CVE-2026-106030. The flaw affected versions earlier than 8.12.0.0 and could let a local attacker with low privileges interfere with unprotected Windows services.

According to TechRadar, the vulnerability involved a NordVPN named pipe, a mechanism Windows applications use to communicate. An attacker who could connect to it might stop unprotected services or change their startup type to manual, potentially causing those applications to stop working.

The issue was reported to CERT Polska by IT security expert Marcin Ressel. TechRadar reports that the vulnerability has been fixed in version 8.12.0.0. The article cites a CVSS v4 base severity score of 6.8 and quotes Ressel describing the flaw as a local privilege escalation with limited impact.

The attack cannot be triggered remotely: an attacker would need an existing foothold on the computer. The source says there have been no reports of active exploitation. Windows Defender and services protected by Windows Tamper Protection are not affected, and the flaw does not affect NordVPN’s VPN function. Users of the Windows app should check that they have version 8.12.0.0 or later.