Paper/Archive/CVE-2026-9560

CVE-2026-9560

OpenVPN Inc OpenVPN Connect — Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary command…

EPSS 0.6%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 47.4.474 × 209.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

Affected

ProductAffectedFixed inSource

OpenVPN Connect3.5.1 – 3.8.1–CNA

Scores by source

OpenVPN (CNA)9.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refopenvpn.net/connect-docs/macos-release-notes.html