CyberSecBulletin

TrustTunnel vulnerabilities

We track 1 vulnerability in TrustTunnel products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest TrustTunnel vulnerabilities

  • 7.1 High severity

    TrustTunnel: Server-Side Request Forgery

    CVE-2026-24902TrustTunnel

    TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In `tcp_forwarder.rs`, SSRF protection for `allow_private_network_connections = false` was only applied in th