CVE-2026-84256

OpenVPN versions 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable due to an argument parsing issue that allows remote authenticated users to execute arbitrary commands through a specially crafted certificate subject. This vulnerability poses a high risk, as it can lead to unauthorized command execution on affected systems. Organizations using these OpenVPN versions on Windows should prioritize immediate remediation to mitigate potential exploitation.