CVE-2025-40710— Host Header Injection (HHI) in the Hotspot Shield VPN client
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-40710
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Host Header Injection (HHI) in the Hotspot Shield VPN client
Source: NVD (National Vulnerability Database)
Vulnerability Description
Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use of the tunnel, together with a forged Host header, can cause the VPN client to redirect or forward HTTP requests to servers other than those originally intended, leading to consequences such as open redirects or delivery of traffic to infrastructure controlled by an attacker. This does not imply a flaw in the target applications, but in how the VPN client internally handles outgoing headers and requests.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Intersections Hotspot Shield VPN 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Intersections Hotspot Shield VPN是美国Intersections公司的一款虚拟专用网络（VPN）服务产品。 Intersections Hotspot Shield VPN 存在注入漏洞，该漏洞源于处理Host头时存在注入问题，可能导致请求重定向或流量转发到攻击者控制的服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hotspot Shield | Hotspot Shield VPN client | 12.9.2 | - |
II. Public POCs for CVE-2025-40710
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-40710
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-74
- CVE-2025-67486
Dolibarr has an Authenticated Remote Code Execution via eval - CVE-2026-26164
M365 Copilot Information Disclosure Vulnerability - CVE-2026-7045
baomidou dynamic-datasource StandardEvaluationContext/SpelEx - CVE-2026-6994
Envoy Query Parameter header_mutation.cc params.add injectio - CVE-2026-41319
MailKit has STARTTLS Response Injection via unflushed stream
V. Comments for CVE-2025-40710
No comments yet