CVE-2020-9442: Openvpn Connect

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there.

Affected products

• Openvpn Connect: up to and including 3.1.0.361

Published 2020-02-28. Last modified 2026-06-17.