PT-2025-21991 · Openvpn · Openvpn 3 Linux

Wolfgang Frisch · Published 2025-05-19 · Updated 2025-06-12 · CVE-2025-3908

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: OpenVPN 3 Linux versions 20 through 24

Description: The configuration initialization tool in OpenVPN 3 Linux allows a local attacker to use symlinks pointing at an arbitrary directory, which will change the ownership and permissions of that destination directory.

Recommendations: For OpenVPN 3 Linux versions 20 through 24, consider restricting the use of the configuration initialization tool until a patch is available to prevent local attackers from exploiting symlinks to alter directory permissions.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2025-09972

CVE-2025-3908

Affected Products

Openvpn 3 Linux

References · 14

• https://bdu.fstec.ru/vul/2025-09972 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3908 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3908 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-3908 · Vendor Advisory
• https://community.openvpn.net/Security%20Announcements/CVE-2025-3908 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-3908 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-3908 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-3908 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3908 · Vendor Advisory
• https://twitter.com/CVEnew/status/1924489440673636393 · Twitter Post
• https://community.openvpn.net/Pages/OpenVPN3Linux · Note
• https://twitter.com/oss_security/status/1924860164915540006 · Twitter Post
• http://openwall.com/lists/oss-security/2025/05/20/2 · Note
• https://twitter.com/dailycve/status/1933224325257310724 · Twitter Post