PT-2026-86643 · Openvpn · Openvpn

CVE-2026-81830

·

Published

2026-09-07

·

Updated

2026-09-07

CVSS v4.0

5.6

Medium

VectorAV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-81830

Affected Products

Openvpn