CVE-2026-78221

OpenVPN / OpenVPN PUBLISHED

Description (CNA)

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs.

Affected (CNA)

Vendor / product	Versions
OpenVPN / OpenVPN	affected 2.7_alpha1 through 2.7.6

CWE

CWE-131

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-78221

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.