EIP-2026-117723

This is a writeup describing an unquoted service path vulnerability in OpenVPN Connect 3.0.0.272. The vulnerability could allow local privilege escalation if an attacker can place an executable in a path that is executed due to improper quoting.