Medium severity · published Sep 7, 2026
CVE-2026-82325
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
6.8
CVSS
0.1%
EPSS
No
On KEV
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OV
ovpn-dco-win · OpenVPN
2.5.0 through 2.8.6 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82325
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82325
community.openvpn.net
https://community.openvpn.net/Security%20Announcements/CVE-2026-82325
More from ovpn-dco-win
6.9
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted…
6.5
CVE-2026-11604
An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based…
5.7
CVE-2026-115402
OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path
5.6
CVE-2026-2738
Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end…
5.5
CVE-2025-50054
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the…