CVE-2025-50055

MediumCVSS 6.4

Published: 27/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML via the RelayState parameter.

Risk Assessment

A malicious or compromised ACS server could inject script into the user's browser, potentially leading to theft of credentials or session data.

Recommendation

Update OpenVPN Access Server to a version newer than 2.14.3.

Other vulnerabilities in OpenVPN Access Server

CVE-2025-3110High
OpenVPN Access Server versions 2.7.2 through 3.1.0 accept bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS