Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-115402 EUVD-2026-112136GHSA-h484-rm8p-m8mw

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition …

Published Oct 28, 2026 · Updated Nov 6, 2026 · Assigned by OpenVPN

Description

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

Affected products

VendorProductAffectedFixed
OpenVPN ovpn-dco-win 0.6.5 – ≤ 2.8.13 —

References