CVE-2024-4877 - AskarLabs CVE Database

CVE-2024-4877

Vendor Openvpn

Product OpenVPN

Weakness CWE-268

Published April 3, 2025

Last update April 4, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges

Key dates

02Disclosure timeline

April 3, 2025 CVE published

April 4, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-4877 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/268.html

Related vulnerabilities

04Related CVE

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security CVE-2022-1003 Sysadmin can override existing configs & bypass restrictions like EnableUploads CVE-2025-7973 Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability CVE-2025-2903 Privilege Chaining in Delphix CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege