← Database

CVE-2025-13086

HIGH CVSS: 7.5 Published: 2025-12-03 Modified: 2026-06-17

Description

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Affected Platforms

Openvpn Openvpn

Weakness Type

CWE-940

References