Vulnerability intelligence

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

CVSS Score

9.4

Critical

EPSS — Exploit Probability

0.6%

Riskier than 44% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered May 28, 2026 · latest May 28, 2026

Coverage timeline

OpenVPN Connect macOS flaw lets attackers gain admin control
securityonline.info · May 28, 2026