CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

Affected products

Openvpn Connect

Openvpn Connect

< 3.8.2

CVSS 4.0

9.4 CRITICAL

CVSS 3.1

7.8 HIGH

EPSS

0.6% (45th percentile)

Weakness

CWE-270, CWE-78, CWE-267, CWE-648

NVD status

Analyzed

Published

2026-05-26