OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
The product does not properly verify that a critical resource is owned by the proper entity.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openvpn | Openvpn | * | 2.5.10 (excluding) |
| Openvpn | Openvpn | 2.6.0 (including) | 2.6.10 (excluding) |
| Openvpn | Ubuntu | mantic | * |