← Database

CVE-2025-10680

HIGH CVSS: 8.8 Published: 2025-10-24 Modified: 2026-06-17

Description

OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use

Affected Platforms

Unknown

Weakness Type

CWE-78

References