Read the docs

OpenVPN

Records100All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

OpenVPN records in CISA KEV

No OpenVPN vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openvpn 49 records MEDIUM Openvpn Access Server 21 records MEDIUM Connect 8 records MEDIUM Ovpn-dco-win 3 records LOW Easy-rsa 1 record LOW Openvpn3linux 1 record LOW Openvpn 3 1 record LOW Openvpn Gui 1 record LOW

Records

1 record in Openvpn3linux · all components

TI-2025-03454 CVE-2025-3908 · GHSA-fp2g-4h6f-28h2

Link following in OpenVPN 3 Linux

Priority LOW 27

The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destina…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00217 Published 2025-05-19 No fix listed CWE-59
Open these records in search →