CVE-2026-82312

OpenVPN versions 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable to a denial of service attack due to a NULL DACL on named IPC objects, which can be exploited by local authenticated users. While the severity is rated low, organizations using these OpenVPN versions on Windows should prioritize addressing this vulnerability to mitigate potential disruptions in service.