CVE-2026-13117 | OpenVPN up to 2.6.20/2.7.4 TLS Session Promotion use after free

A vulnerability was found in OpenVPN up to 2.6.20/2.7.4 and classified as very critical. The impacted element is an unknown function of the component TLS Session Promotion. The manipulation results in use after free.

This vulnerability is cataloged as CVE-2026-13117. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More