CVE-2026-105390 — OpenVPN / ovpn-dco-win

CVE-2026-105390

OpenVPN / ovpn-dco-win PUBLISHED

Description (CNA)

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

Affected (CNA)

Vendor / product	Versions
OpenVPN / ovpn-dco-win	affected 0.6.5 through 1.3.5; affected 2.4.0 through 2.8.7

CWE

CWE-413, CWE-833

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-105390

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.