CVE-2025-3908

Publication date

2025-05-19 14:59:08

Family

OpenVPN

State

PUBLISHED

Description

The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.