High severity7.8NVD Advisory· Published Jan 8, 2024· Updated Jun 17, 2026

CVE-2023-7224

Description

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenVPN/Connect
cpe:2.3:a:openvpn:connect:*:*:*:*:*:macos:*:*
Range: >=3.0.0,<=3.4.6
OpenVPN/OpenVPNllm-fuzzy
Range: 3.0 - 3.4.6
OpenVPN/OpenVPN Connectcpe-rescue
Range: 3.0

Patches

Vulnerability mechanics

References

openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000