Symlink Vulnerability in OpenVPN 3 Client (CVE-2025-3908)
Summary
UBUNTU-CVE-2025-3908: The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destina... Affects openvpn3-client versions 24+dfsg-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenVPN 3 Client is a widely used software for creating secure point-to-point or site-to-site connections in routed or bridged configurations. It is known for its flexibility and strong security features, allowing users to connect to VPNs with ease. However, versions 20 through 24 of OpenVPN 3 Linux have a critical vulnerability that allows local attackers to exploit symlink configurations, potentially compromising directory ownership and permissions.
Vulnerability Detail
The vulnerability arises from the configuration initialization tool in OpenVPN 3 Linux, which allows local attackers to create symlinks pointing to arbitrary directories. This can lead to unauthorized changes in ownership and permissions of those directories, posing a significant security risk. Attackers could manipulate sensitive files or directories, leading to data breaches or system compromise.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should restrict local access to the system and monitor for any unauthorized symlink creation. Additionally, consider implementing stricter permissions on sensitive directories to mitigate potential exploitation.
Conclusion
CVE-2025-3908 presents a significant security risk in OpenVPN 3 Client versions 20 to 24, allowing local attackers to manipulate directory permissions through symlink exploitation. It is crucial to update to the patched version to mitigate this vulnerability and ensure system security.
See every vulnerability recorded for openvpn3-client →
FAQ
CVE-2025-3908 is a vulnerability in OpenVPN 3 Client that allows local attackers to exploit symlinks, leading to unauthorized changes in directory ownership and permissions.
The vulnerability affects OpenVPN 3 Linux versions 20 through 24.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of CVE-2025-3908 is 6.2, indicating a medium severity level.
If you cannot update the package immediately, implement stricter permissions on sensitive directories and monitor for unauthorized symlink creation as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for openvpn3-client.
