medium5.6
CVE-2026-81830
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via i…
Impact
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenVPN | OpenVPN 2.4.0 | through 2.6.22 |
Versions were read from the advisory text. No structured product data has been published for this record yet.