Binary Planting Vulnerability in OpenVPN for Windows by OpenVPN
CVE-2026-84226

8.5HIGH

Key Information:

Vendor

Openvpn
Status
Openvpn
Vendor
CVE Published:
7 September 2026

What is CVE-2026-84226?

A security loophole in OpenVPN for Windows allows local authenticated users to exploit a binary planting vulnerability during network configuration. This can potentially lead to unauthorized execution of arbitrary code with elevated privileges, posing risks to system integrity. Users of OpenVPN versions 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 are particularly at risk if proper precautionary measures are not taken.

Affected Version(s)

OpenVPN Windows 2.5.0 <= 2.6.22

OpenVPN Windows 2.7_alpha1 <= 2.7.6

References

https://community.openvpn.net/Security%20Announcements/CV...
vendor-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.