Vulnerability intelligence

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

CVSS Score

9.4

Critical

EPSS — Exploit Probability

0.6%

Riskier than 45% of all CVEs · checked 2026-09-05

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered May 28, 2026 · latest May 28, 2026

Coverage timeline

OpenVPN Connect macOS flaw lets attackers gain admin control
securityonline.info · May 28, 2026