CVE-2026-78043

UNKNOWN

Description

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths

Timeline

Published:September 7th, 2026 8:17 AM

Last modified:September 8th, 2026 7:07 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-22

References & Reports

Advisories, patches, and third-party reports

https://community.openvpn.net/Security%20Announcements/CVE-2026-78043

Source: NIST NVD · Data may lag official sources by up to one minute