CVE-2025-13086

CVE-2025-13086 is a high-severity vulnerability affecting OpenVPN versions 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1, stemming from improper validation of source IP addresses. This flaw allows an unauthenticated attacker to hijack an existing OpenVPN session from a different IP address, leading to a denial of service for the legitimate client. With a CVSS score of 7.5, the vulnerability is network-exploitable with low attack complexity and no user interaction required, resulting in high availability impact. There is currently no evidence of active exploitation, nor are there public exploit modules like Metasploit or Nuclei, though it has garnered some community discussion and media coverage.