Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-24904

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 bytes and calls `extract_client_random(...)`. If `parse_tls_plaintext` fails (for example, a fragmented/partial ClientHello split across TCP writes), `extract_client_random` returns `None`. In `rules.rs`, `RulesEngine::evaluate` only evaluates `client_random_prefix` when `client_random` is `Some(...)`. As a result, when extraction fails (`clie
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d2fd38f7e28e54d520ef07101bb961c201d4d74d26c27f0513bc661e3d8f7f19
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"TrustTunnel","vendor":"TrustTunnel","versions":[{"status":"affected","version":"< 0.9.115"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b06fa44c6c13145de4f47a16fff7a5bca89795ea8f1acf88205add394c2b048 · sha256:f093639a0c297eb1… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:4b06fa44c6c13145de4f47a16fff7a5bca89795ea8f1acf88205add394c2b048 · sha256:f093639a0c297eb1… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-284","description":"CWE-284: Improper Access Control","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:4b06fa44c6c13145de4f47a16fff7a5bca89795ea8f1acf88205add394c2b048 · sha256:f093639a0c297eb1… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"name":"https://github.com/TrustTunnel/TrustTunnel/commit/aa5060145506952b9431b0ed3edb52bb6c08d9a6","tags":["x_refsource_MISC"],"url":"https://github.com/TrustTunnel/TrustTunnel/commit/aa5060145506952b9431b0ed3edb52bb6c08d9a6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b06fa44c6c13145de4f47a16fff7a5bca89795ea8f1acf88205add394c2b048 · sha256:f093639a0c297eb1… · /containers/cna/references/1
{"name":"https://github.com/TrustTunnel/TrustTunnel/security/advisories/GHSA-fqh7-r5gf-3r87","tags":["x_refsource_CONFIRM"],"url":"https://github.com/TrustTunnel/TrustTunnel/security/advisories/GHSA-fqh7-r5gf-3r87"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b06fa44c6c13145de4f47a16fff7a5bca89795ea8f1acf88205add394c2b048 · sha256:f093639a0c297eb1… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer