CVE-2025-10680: openvpn OS Command Injection
CVSS: 8.8v3.1HighDeferred
AliasesUBUNTU-CVE-2025-10680
Published 24-10-2025Last modified 26-02-2026
Vulnerability summary
CVE-2025-10680 is a high (CVSS 8.8) OS Command Injection vulnerability in openvpn. EPSS estimates a 7.34% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
7.34%
0%100%
Low · +0.26 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 24-10-2025PublishedVulnerability first disclosed.
- 26-02-2026Last modifiedVulnerability information updated.
Description
OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use
CVSS metrics
3 scores · 3 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
7.34%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
+0.26 pp
From 7.09% on 20-09-2026
20-09-202620-10-2026
EPSS score7.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Openvpn1 product
- openvpn≥ 2.7_alpha1, ≤ 2.7_beta1
Ubuntu1 product
- openvpnAll versions (No fix recorded)
2 vendors · 2 products