VULNERABILITY INTELLIGENCE
CVE-2026-81830
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-09-07
Last modified2026-09-08
Description
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
Weakness classification
- security@openvpn.net: CWE-73