A critical vulnerability in OpenVPN Connect versions prior to 3.5.0 exposes users' private keys.The flaw allows attackers with physical access to retrieve the private key from debug logs.Exploitation requires enabling Developer Mode, USB Debugging, and technical expertise.OpenVPN has released version 3.5.0 to address the vulnerability; users should update immediately.