VULNERABILITY INTELLIGENCE
CVE-2026-78043
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-09-07
Last modified2026-09-08
Description
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths
Weakness classification
- security@openvpn.net: CWE-22