CVE-2014-5455: Openvpn

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.

Affected products

• Openvpn Openvpn: version 2.1.28.0 only
• Privatetunnel Privatetunnel: version 2.3.8 only

Published 2014-08-25. Last modified 2026-06-17.