# OpenVPN vulnerability allows user impersonation in Ubuntu

> **Key takeaway:** A flaw in how OpenVPN handles certificate subject fields could allow an authenticated user to impersonate others.

**Published:** 2026-10-22T15:38:41+00:00 
**Source:** Ubuntu Security & Release Notices 
**Category:** distro-news 
**Canonical URL:** https://fosswire.org/news/openvpn-vulnerability-allows-user-impersonation-in-ubuntu.html 

## Summary
Ubuntu has released security updates for OpenVPN to address CVE-2026-84790. The vulnerability stems from incorrect handling of certificate subject fields, which could enable a remote authenticated user to impersonate other users and gain unintended access to network services.

## Vulnerability details
- The issue involves the incorrect handling of **certificate subject fields**.
- An attacker must be a **remote authenticated user** to exploit this.
- Successful exploitation may lead to **user impersonation** and unintended access to network services.
- Users must **restart OpenVPN** after updating the package to apply the fix.