CVE-2024-8474: Openvpn Connect

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic

Affected products

• Openvpn Connect: before 3.5.0 (fixed in 3.5.0)

Published 2025-01-06. Last modified 2026-06-17.