KaringX vulnerabilities
We track 1 vulnerability in KaringX products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest KaringX vulnerabilities
- 7.5 High severity
clashmi: Improper Certificate Validation
KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers to intercept HTTPS traffic by presenting any certificate. Attackers operating the user's proxy node can serve a forged update manifes