CVE-2014-5455

CVE-2014-5455 is an unquoted Windows search path vulnerability affecting the ptservice in PrivateTunnel (prior to version 3.0) and OpenVPN Connect (prior to version 3.1) on Windows. This flaw allows a local attacker to achieve privilege escalation by placing a malicious program.exe file in the system drive's root directory. The vulnerability has a CVSS score of 6.9, indicating high impact with complete confidentiality, integrity, and availability compromise, but requires medium attack complexity and local access. While not actively exploited in the wild and not on the KEV catalog, public exploit code exists, specifically EDB-34037, though there is minimal community discussion or media coverage.