CyberRota Analysis
AI-GeneratedThe vulnerability in OpenVPN affects the Windows interactive service, allowing local authenticated users to bypass the trusted configuration directory constraint due to improper file path validation. This could lead to unauthorized access or manipulation of sensitive configurations, potentially compromising the security of the VPN service. Organizations using affected versions of OpenVPN on Windows should prioritize patching to mitigate the risk of exploitation.
CVE
CVE-2026-81830
Severity
MEDIUM
CVSS
5.6
EPSS
0.11%
Windows
Original NVD Description
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation