CVE-2026-40215 | THREATINT

Description

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

PUBLISHED Reserved 2026-04-13 | Published 2026-06-08 | Updated 2026-06-08 | Assigner OpenVPN

MEDIUM: 6.1CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:L/SI:N/SA:L

Problem types

CWE-125 Out-of-bounds read

CWE-416 Use after free

Product status

Default status

unaffected

2.6.0 (semver)

affected

2.7_alpha1 (semver)

affected

References

community.openvpn.net/Security Announcements/CVE-2026-40215 vendor-advisory

community.openvpn.net/ReleaseHistory release-notes

cve.org (CVE-2026-40215)

nvd.nist.gov (CVE-2026-40215)

Download JSON