CVE-2026-63649
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks.
Risk Assessment
This could allow unauthorized configurations to be loaded, potentially leading to privilege escalation or other security breaches.
Recommendation
Update OpenVPN to a version that includes a fix for this vulnerability.
Original NVD description (English source)
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks