CVE-2026-81830

OpenVPN / OpenVPN PUBLISHED

Description (CNA)

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation

Affected (CNA)

Vendor / product	Versions
OpenVPN / OpenVPN	affected 2.4.0 through 2.6.22

CWE

CWE-73

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-81830

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.