Every CVE Search/ Get API key

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an...

4.6 MediumFix available

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.66%Up 0.6 points since Dec 4, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
CVE-2025-13086
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
Weakness
CWE-940
Updated
2026-11-02
EUVDEUVD-2025-201102 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
EUVD-2025-201102
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
Updated
2026-11-02
GitHub AdvisoriesGHSA-xv5w-q5wq-r3c3 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an...

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
GHSA-xv5w-q5wq-r3c3
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-940
Updated
2026-11-02
NVD 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
CVE-2025-13086
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-940
Updated
2026-11-02
OSVALPINE-CVE-2025-13086 7.5

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
ALPINE-CVE-2025-13086
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
CVE-2025-13086
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
Weakness
CWE-940
Updated
2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2025-13086 7.5

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
DEBIAN-CVE-2025-13086
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2777 4.6

openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets.

Security Fix(es):

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client(CVE-2025-13086)

Record
OESA-2025-2777
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2025-2778 4.6

openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets.

Security Fix(es):

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client(CVE-2025-13086)

Record
OESA-2025-2778
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2025-13086 4.6

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Record
UBUNTU-CVE-2025-13086
CVSS 4.0
4.6 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2742 No score

openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets.

Security Fix(es):

This is a security vulnerability affecting Debian packages. More details are required from the Debian security tracker.(CVE-2025-13086)

Record
OESA-2025-2742
Updated
2026-11-02
OSVopenSUSE-SU-2026:20137-1 No score

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
Record
openSUSE-SU-2026:20137-1
Updated
2026-11-02
OSVSUSE-SU-2026:0831-1 No score

Security update for openvpn

This update for openvpn fixes the following issues:

  • Updated to version 2.6.10 that fixes:
    • CVE-2025-13086: improper validation of IP addresses that can cause denial of service (bsc#1254486)
Record
SUSE-SU-2026:0831-1
Updated
2026-11-02
OSVSUSE-SU-2026:20196-1 No score

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS (bsc#1254486).
Record
SUSE-SU-2026:20196-1
Updated
2026-11-02
OSVUSN-7898-1 No score

openvpn vulnerability

Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification checks. A remote attacker could possibly use this issue to bypass source IP address validation.

Record
USN-7898-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvpn
Alpine:v3.19
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Alpine:v3.20
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Alpine:v3.21
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Alpine:v3.22
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Alpine:v3.23
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Alpine:v3.24
 2.6.0 up to 2.6.16-r0
2.6.16-r0
openvpn
Debian:12
 before 2.6.3-1+deb12u4, plus listed versions
2.6.3-12.6.3-1+deb12u12.6.3-1+deb12u1~bpo11+12.6.3-1+deb12u22.6.3-1+deb12u2~bpo11+12.6.3-1+deb12u3
2.6.3-1+deb12u4
openvpn
Debian:13
 before 2.6.14-1+deb13u1, plus listed versions
2.6.14-1
2.6.14-1+deb13u1
openvpn
Debian:14
 before 2.7.0~rc2-2, plus listed versions
2.6.14-12.6.14-22.6.15-12.7.0~alpha1-12.7.0~alpha2-1
Show 6 moreShow less
2.7.0~alpha3-12.7.0~beta1-12.7.0~beta2-12.7.0~beta3-12.7.0~rc1-12.7.0~rc2-1
2.7.0~rc2-2
openvpn
openEuler:24.03-LTS-SP2
 before 2.6.9-5.oe2403sp2
2.6.9-5.oe2403sp2
Show 15 moreShow less
Affected packages
PackageAffectedFixed
openvpn
openEuler:24.03-LTS
 before 2.6.9-6.oe2403
2.6.9-6.oe2403
openvpn
openEuler:24.03-LTS-SP1
 before 2.6.9-6.oe2403sp1
2.6.9-6.oe2403sp1
openvpn
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn-dco
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn-dco
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn-dco
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn
openSUSE:Leap 15.6
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn-dco
openSUSE:Leap 15.6
 before 2.6.10-150600.3.20.1
2.6.10-150600.3.20.1
openvpn
SUSE:Linux Enterprise Server 16.0
 before 2.6.10-160000.3.1
2.6.10-160000.3.1
openvpn
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.6.10-160000.3.1
2.6.10-160000.3.1
openvpn
Ubuntu:24.04:LTS
 before 2.6.14-0ubuntu0.24.04.3, plus listed versions
2.6.5-0ubuntu12.6.7-1ubuntu12.6.9-1ubuntu22.6.9-1ubuntu32.6.9-1ubuntu4
Show 5 moreShow less
2.6.9-1ubuntu4.12.6.12-0ubuntu0.24.04.12.6.12-0ubuntu0.24.04.32.6.14-0ubuntu0.24.04.12.6.14-0ubuntu0.24.04.2
2.6.14-0ubuntu0.24.04.3
openvpn
Ubuntu:25.10
 before 2.6.14-2ubuntu1.1, plus listed versions
2.6.13-1ubuntu32.6.14-1ubuntu12.6.14-2ubuntu1
2.6.14-2ubuntu1.1
openvpn
openSUSE:Leap 16.0
 before 2.6.10-160000.3.1
2.6.10-160000.3.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-13086 is a medium vulnerability (CVSS 4.6) in Openvpn, published November 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 52nd percentile. Fixed in openvpn 2.6.16-r0.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open