Medium severityNVD Advisory· Published Oct 13, 2026

CVE-2026-105390

Description

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenVPN/Ovpn Dco Winllm-fuzzy
Range: 0.6.5-1.3.5, 2.4.0-2.8.7

Patches

Vulnerability mechanics

References

community.openvpn.net/Security%20Announcements/CVE-2026-105390nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000