~/products/github.com/jkroepke_openvpn-auth-oauth2

pipeline liveDigest Docs

Github.Com Jkroepke Openvpn-Auth-Oauth2 vulnerabilities

1 known vulnerability affecting github.com/jkroepke_openvpn-auth-oauth2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2026-41070P2CRITICAL≥ 1.26.3, < 1.27.32026-04-22

CVE-2026-41070 [CRITICAL] CWE-287 openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access # Summary When `openvpn-auth-oauth2` is deployed in the **experimental plugin mode** (shared library loaded by OpenVPN via the `plugin` directive), clients that do not support WebAuth/SSO (e.g., the `openvpn` CLI on Linux) are incorrectly admitted to the VPN despite being denie

Github.Com Jkroepke Openvpn-Auth-Oauth2 vulnerabilities | cvebase