Maple Labs

CVE search · CVE-2026-9560

CVE-2026-9560

critical 9.4

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
security@openvpn.net
Weakness
CWE-78, CWE-267, CWE-270, CWE-648

Severity

VersionScoreVectorSource
CVSS 4.0 critical 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X security@openvpn.netSecondary
CVSS 3.1 high 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References