OpenVPN Win 2.6.22 / 2.7.6 Local Auth Binary Planting
CVE-2026-84226 Published on September 7, 2026
OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps
Vulnerability Analysis
CVE-2026-84226 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is an Untrusted Path Vulnerability?
The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
CVE-2026-84226 has been classified to as an Untrusted Path vulnerability or weakness.
Products Associated with CVE-2026-84226
Want to know whenever a new CVE is published for OpenVPN? stack.watch will email you.
Affected Versions
OpenVPN:- Version 2.5.0, <= 2.6.22 is affected.
- Version 2.7_alpha1, <= 2.7.6 is affected.