CVE-2026-105390

UNKNOWN

Description

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

Timeline

Published:October 13th, 2026 11:17 PM

Last modified:October 15th, 2026 8:38 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-413 CWE-833

References & Reports

Advisories, patches, and third-party reports

https://community.openvpn.net/Security%20Announcements/CVE-2026-105390

Source: NIST NVD · Data may lag official sources by up to one minute