CVE-2025-13751: Openvpn

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

Affected products

• Openvpn Openvpn: from 2.5.0, before 2.6.17 (fixed in 2.6.17); version 2.7 only

Published 2025-12-03. Last modified 2026-06-17.