PT-2026-114974

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common name field accepts path traversal sequences and openvpn csc conf write concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...