Skip to content
OpenAdvisories
High · 7.5 CVE-2024-24974 EUVD-2024-22337GHSA-mfqw-44wg-mrpf

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacke…

Published Jul 8, 2024 · Updated Nov 3, 2026 · Assigned by OpenVPN

Description

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

Affected products

VendorProductAffectedFixed
OpenVPN OpenVPN 2 2.6.9 and earlier —

Advisories 4

References