CVE-2024-4877

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.0 through 2.6.10

Description The issue allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to, enabling it to escalate its privileges.

Recommendations For OpenVPN versions 2.4.0 through 2.6.10, consider restricting access to the named pipe creation functionality to prevent privilege escalation until a patch is available. As a temporary workaround, consider disabling the OpenVPN GUI component on Windows systems to minimize the risk of exploitation.