medium6.2
CVE-2025-3908
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory wh…
Impact
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn3linux | from 20 through 24 |