By vendor

Openvpn vulnerabilities

Known CVEs affecting Openvpn products, prioritized by severity, with SEC.co remediation and detection guidance.

3 published vulnerabilities

• CVE-2025-3110HIGH 7.5

  OpenVPN Access Server versions 2.7.2 through 3.1.0 contain a flaw in how they process HTTP headers, specifically permitting bare line-feed characters (without carriage returns) in header values. This weakness enables HTTP request smuggling attacks when the server sits behind a reverse proxy—a common deployment pattern. An attacker can craft malicious requests that appear valid to the proxy but are interpreted differently by OpenVPN, allowing them to bypass security controls, inject unauthorized commands, or manipulate session state without authentication.

• CVE-2026-13698HIGH 7.5

  OpenVPN has a memory leak vulnerability affecting versions 2.5.0 through 2.5.11, 2.6.0 through 2.6.20, and 2.7_alpha1 through 2.7.4. An attacker with a valid tls-crypt-v2 client key can trigger this leak repeatedly, eventually exhausting server memory and causing the VPN service to become unavailable. The vulnerability requires network access and a legitimate cryptographic key, but no user interaction is needed to exploit it.

• CVE-2026-13122MEDIUM 5.3

  OpenVPN has a vulnerability in versions 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 that allows an authenticated attacker to crash the VPN server by sending a specially crafted authentication token when external authentication is enabled. The attack requires valid credentials and succeeds only under specific conditions, but once triggered, it causes a denial of service that disrupts all users relying on that OpenVPN instance.