CVE-2026-9560

OpenVPN Inc / OpenVPN Connect PUBLISHED

Description (CNA)

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

Affected (CNA)

Vendor / product	Versions
OpenVPN Inc / OpenVPN Connect	affected 3.5.1 through 3.8.1

CWE

CWE-78, CWE-267, CWE-270, CWE-648

References

https://openvpn.net/connect-docs/macos-release-notes.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.