CVE-2025-3110 | THREATINT

Description

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

PUBLISHED Reserved 2025-04-02 | Published 2026-07-08 | Updated 2026-07-08 | Assigner OpenVPN

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Problem types

CWE-444 Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')

Product status

Default status

unaffected

2.7.2 (semver)

affected

References

openvpn.net/as-docs/as-3-2-release-notes.html release-notes

cve.org (CVE-2025-3110)

nvd.nist.gov (CVE-2025-3110)

Download JSON