A directory traversal issue was identified in the OpenVPN interactive service (openvpnserv) on Windows. User-provided configuration file paths were not rejected when they contained forward slashes, which the Windows PathCch* path-canonicalization functions do not treat as path separators. As a result, a "/../" sequence in a configuration path was not canonicalized, allowing a local user to bypass the CheckConfigPath() restriction that limits which directories may contain OpenVPN configuration files. This issue affects OpenVPN only on Windows; platforms that do not build the openvpnserv component are not affected.