CVE-2026-84226

OpenVPN versions 2.5.0 to 2.6.22 and 2.7_alpha1 to 2.7.6 on Windows are vulnerable to a binary planting attack, which allows local authenticated users to execute arbitrary code during network configuration. This vulnerability poses a high risk, as it can lead to unauthorized access and potential system compromise. Organizations using affected OpenVPN versions on Windows should prioritize patching to mitigate this risk.