CVE-2026-81830
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.6
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
- EPSS probability
- 0.11%
- CWE
- CWE-73
- Published
- 2026-09-07
- Last modified
- 2026-09-08
Affected products
- OpenVPN OpenVPN
Weakness type
Related vulnerabilities
- CVE-2026-88899 — knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
- CVE-2026-53956 — Rattler vulnerable to package cache path traversal via conda package build string
- CVE-2026-86751 — Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown
- CVE-2026-86741 — Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
- CVE-2026-79692 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-87815 — SiYuan before v3.8.2 Path Traversal via removeRiffDeck
- CVE-2026-53581 — ntp: write path traversal
- CVE-2026-86995 — n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read