Medium severity · published Oct 27, 2025
CVE-2025-50055
Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer…
6.4
CVSS
0.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML via the RelayState parameter
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Access Server · OpenVPN
2.14.0 through 2.14.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-50055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-50055
openvpn.net
https://openvpn.net/as-docs/as-3-0-release-notes.html#access-server-3-0-0
More from Access Server
7.5
CVE-2025-3110
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed…