Package · Debian

openvpn-auth-oauth2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 10.0

CVE-2026-41070

openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access

openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth-oauth2 is deployed in the experimental plugin mode (shared …

jkroepke openvpn-auth-oauth2 openvpn-auth-oauth2 github.com/jkroepke/openvpn-auth-oauth2 Debian Ubuntu Go

May 8, 2026