CVE-2024-24974: Openvpn

High severity, CVSS 7.5. EPSS: 9.8% chance of exploitation in the next 30 days.

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

Affected products

• Openvpn Openvpn: before 2.5.10 (fixed in 2.5.10); from 2.6.0, before 2.6.10 (fixed in 2.6.10)

Published 2024-07-08. Last modified 2026-06-17.