furlongm openvpn-monitor up to and including 1.1.3 allows CSRF to disconnect an arbitrary client.
openvpn-monitor project openvpn-monitor