CyberRota Analysis
AI-GeneratedThe vulnerability in OpenVPN affects the Windows Interactive Service, allowing local authenticated users to bypass security constraints and load arbitrary configuration files through specially crafted paths. This could lead to unauthorized access or manipulation of the VPN configuration, potentially compromising the integrity of the VPN service. Organizations using affected versions of OpenVPN on Windows should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths