CVE-2026-84256
Description
A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system.
Statement
Important: This vulnerability in OpenVPN allows remote authenticated users to execute arbitrary commands through a crafted certificate subject. However, this flaw specifically impacts OpenVPN installations on Windows platforms and does not affect OpenVPN packages provided within Red Hat's Linux-based distributions.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Other
Technical Impact: Execute Unauthorized Code or Commands; Alter Execution Logic; Read Application Data; Modify Application Data
An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
