Openvpn 3 Core Library
Monthly
Improper certificate validation in the OpenVPN 3 Core library versions 3.4 through 3.11.7 lets an attacker bypass Extended Key Usage (EKU) restrictions during certificate validation, so a certificate that an EKU policy should reject for a given role can still be accepted. The flaw (CWE-295) is rated 6.3 with a network vector, no privileges and no user interaction, but high attack complexity and a present attack requirement reflect that the bypass only matters in deployments that actually depend on EKU constraints as a security control and that the attacker must supply an otherwise trust-chain-valid certificate. No public exploit has been identified at time of analysis and there is no KEV listing; per the vuln.today priority it is tracked for this month, and the vendor (OpenVPN) has published a security announcement.
Improper certificate validation in the OpenVPN 3 Core library versions 3.4 through 3.11.7 lets an attacker bypass Extended Key Usage (EKU) restrictions during certificate validation, so a certificate that an EKU policy should reject for a given role can still be accepted. The flaw (CWE-295) is rated 6.3 with a network vector, no privileges and no user interaction, but high attack complexity and a present attack requirement reflect that the bypass only matters in deployments that actually depend on EKU constraints as a security control and that the attacker must supply an otherwise trust-chain-valid certificate. No public exploit has been identified at time of analysis and there is no KEV listing; per the vuln.today priority it is tracked for this month, and the vendor (OpenVPN) has published a security announcement.