OpenVPN AS Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability - CVE-2025-3110 - Vulnerability Database

OpenVPN AS

OpenVPN AS Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability - CVE-2025-3110

High

Reference: CVE-2025-3110

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-3110

Title: OpenVPN AS Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability

Overview:

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy