Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-07T07:47:04 OpenVPN: OpenVPN: Arbitrary Code Execution via Binary Planting on Windows 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-426

OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps

A flaw was found in OpenVPN on Windows. A local authenticated user could perform a binary planting attack during network configuration steps. This vulnerability could allow the attacker to execute arbitrary code or escalate privileges on the affected system.

The vulnerability is rated as Important because it allows local authenticated users to achieve arbitrary code execution via a binary planting attack during network configuration steps. However, this flaw specifically affects OpenVPN on Windows platforms. Red Hat's OpenVPN packages, available in Community Projects like Fedora and EPEL, are built for Linux environments and are not susceptible to this Windows-specific vulnerability. https://www.cve.org/CVERecord?id=CVE-2026-84226 https://nvd.nist.gov/vuln/detail/CVE-2026-84226 https://community.openvpn.net/Security%20Announcements/CVE-2026-84226