Skip to main content

OpenVPN EUVDEUVD-2026-72275

| CVE-2026-78043 MEDIUM
Path Traversal (CWE-22)
2026-09-03 GHSA-2xjv-5x6f-xgmp
Path Traversal Red Hat Suse
5.6
CVSS 4.0 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
5.6 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Local vector, low-privilege account; AC:H for the specific API-mismatch precondition; scope change because the service policy bypass impacts the broader VPN operating context beyond openvpnserv itself.

3.1 AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N
4.0 AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
SUSE
6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
X

Lifecycle Timeline

5
Metadata Corrected
Sep 07, 2026 - 08:40 vuln.today
tag: Microsoft removed
Source Code Evidence Fetched
Sep 07, 2026 - 08:27 vuln.today
Analysis Generated
Sep 07, 2026 - 08:27 vuln.today
CVE Published
Sep 03, 2026 - 18:09 github-releases
UNKNOWN (no severity yet)
CVE Published
Sep 03, 2026 - 18:09 github-releases
MEDIUM 5.6

Description PRE-NVD

Disclosed via GitHub release of openvpn/openvpn. NVD scoring and full description are pending.

AnalysisAI

Windows openvpnserv path-validation bypass in OpenVPN 2.7_alpha1 through 2.7.6 allows a low-privileged local user to circumvent administrative config-path restrictions by using '/' instead of '\' as a directory separator. Windows path-validation APIs do not recognize '/' as a separator while file-open APIs do, creating a mismatch exploitable to load a user-controlled OpenVPN config file that administrators have explicitly prohibited. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a local Windows account with at least low privileges (PR:L) on a system running OpenVPN 2.7_alpha1 through 2.7.6 with openvpnserv active and not running exclusively in iservice mode. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:L/AC:L/AT:P/PR:L/UI:P) scores this at 5.6 (Medium), consistent with a local privilege-escalation class of finding. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade OpenVPN to version 2.7.7 or later, which explicitly rejects '/' characters in config paths within openvpnserv, eliminating the API mismatch. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 12 Not-Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Not-Affected
SUSE Linux Enterprise Server 15 SP7 Not-Affected
SUSE Linux Enterprise Server 16.0 Not-Affected

Share

EUVD-2026-72275 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy