CVE-2024-27459: Openvpn

High severity, CVSS 7.8. EPSS: 8.3% chance of exploitation in the next 30 days.

The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.

Affected products

• Openvpn Openvpn: before 2.5.10 (fixed in 2.5.10); from 2.6.0, before 2.6.10 (fixed in 2.6.10)

Published 2024-07-08. Last modified 2026-06-17.