CVE-2025-3908
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change th…
Published: 2025-05-19 · CVSS: 6.2 · CVSS 3.1
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7