Access Server: CVE-2026-48710 Starlette Vulnerability False Positive

Description

Some vulnerability and security scanners may flag OpenVPN Access Server as vulnerable to CVE-2026-48710 because current Access Server versions include a version of Starlette earlier than 1.0.1 as a dependency.

After receiving reports through our support platform, our developers confirmed that Access Server isn’t affected by CVE-2026-48710 based on its implementation. However, we plan to update the Starlette dependency in an upcoming Access Server release.

Solution

No action is required for this CVE at this time.

Need help?

If you have questions, submit a support ticket.