CVE-2026-115402
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
OpenVPN ovpn-dco-win versions 0.6.5 through 2.8.13 allow unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.
Risk Assessment
An unprivileged local user can crash the system, causing service unavailability and potential loss of unsaved data on machines with the driver installed.
Recommendation
Update the ovpn-dco-win driver to a version later than 2.8.13 if available, or apply vendor-recommended mitigations. Restrict local access to machines with this driver to trusted users.
Other vulnerabilities in OpenVPN ovpn-dco-win
See all- CVE-2026-105390Medium
Improper synchronization in OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
- CVE-2026-82325Medium
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver versions 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages.
- CVE-2026-11604Medium
In OpenVPN ovpn-dco-win versions 2.0.0 through 2.8.3, an incorrect buffer size calculation in the epoch key generator allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, causing a system crash.
Original NVD description (English source)
OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS