CVE-2026-97350

    Dashboard / Vulnerabilities / CVE-2026-97350

    CVE-2026-97350

    Published: 3 Nov 2026Last Modified: 5 Nov 2026

    Summary: Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

    Details: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: * Improper authorization of configuration checksum updates: The privileged service does not properly validate the authorization of connecting clients when updating the checksum of an OpenVPN configuration. This allows a non-privileged local user to modify an OpenVPN configuration and set a valid checksum without administrator privileges. The modified configuration is subsequently processed with NT AUTHORITY\SYSTEM privileges. * Argument injection via proxy settings: The client does not properly validate or sanitize proxy settings before passing them as arguments to OpenVPN. A non-privileged local user can inject additional arguments through the proxy settings, influencing the execution of OpenVPN with NT AUTHORITY\SYSTEM privileges. This attack vector does not require direct communication with the privileged service or modification of the protected OpenVPN configuration.

    References: https://wiki.securepoint.de/Advisory/CVE-2026-97350, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97350.json, https://nvd.nist.gov/vuln/detail/CVE-2026-97350, https://github.com/Securepoint/openvpn-client

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a0de6dd9ee05334d5c68fe85503696e287ba0bc9
    Fixed -5300867d91eb62e403c13e89b5edbc77e1f75d6c

    Affected versions

    2.0.49
    2.0.48
    2.0.47
    2.0.46
    2.0.45
    2.0.44
    2.0.43
    2.0.42
    2.0.41
    2.0.40
    2.0.39
    2.0.38
    2.0.37
    2.0.36
    2.0.35
    2.0.34
    2.0.33
    2.0.32
    2.0.31
    2.0.30-release
    2.0.30
    2.0.29
    2.0.28
    2.0.27
    2.0.26
    2.0.25
    2.0.24
    2.0.23
    2.0.22
    2.0.20
    2.0.18
    2.0.17
    2.0.16
    2.0.15

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-97350 | CVE-DB