CVE-2022-33738

HIGH 7.5CVE-2022-33738 · Published 06/07/2022 · updated 17/06/2026

In short

CVE-2022-33738 is a HIGH (CVSS 7.5) vulnerability affecting openvpn access server (openvpn).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.2% of all vulnerabilities.
Fix: update to 2.11.0 or later.

Package	Affected versions	Patched versions
openvpn access server openvpn	`< 2.11.0`	`2.11.0`

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.11.0

2.11.0

More vulnerabilities in openvpn access server

See all →