CVE-2026-81830
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
- Published Sep 7, 2026
- CVSS 5.6 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)