CVE-2025-3908

The configuration initialization tool in OpenVPN 3 Linux versions v20 through v24 is vulnerable to a local privilege escalation flaw. A local attacker can exploit the improper handling of symbolic links before file access to point at an arbitrary directory, resulting in unauthorized changes to th...