Medium severity6.4NVD Advisory· Published Oct 27, 2025· Updated Apr 15, 2026
CVE-2025-50055
CVE-2025-50055
Description
Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML via the RelayState parameter
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >=2.14.0 <=2.14.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.