CVE-2023-7235

The OpenVPN GUI installer (versions prior to 2.6.9 ) fails to set proper access control restrictions on the installation directory when a non-standard installation path is utilized. This incorrect default permission (CWE-276) allows an attacker to replace binaries with arbitrary executables. Whil...