OpenVPN Connect CVE-2026-45115 Echo Script ACE via Server-Pushed Config

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•3

Detects indicators of compromise associated with CVE-2026-45115 in OpenVPN Connect, including suspicious child processes spawned by OpenVPN, the creation of known PoC marker files, and the execution of commands containing exploitation strings related to echo script injection.