CVE-2026-78221

The vulnerability affects the Windows Interactive Service in OpenVPN versions 2.7_alpha1 through 2.7.6, where an incorrect buffer size calculation can lead to memory corruption or the disclosure of sensitive information through specially crafted NRPT inputs. Local authenticated users can exploit this flaw, potentially compromising system integrity or confidentiality. Organizations using the affected OpenVPN versions on Windows should prioritize remediation to mitigate risks associated with this vulnerability.