← CVE Intelligence

CVE-2026-77638

torproject / Tor PUBLISHED

Description (CNA)

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.

Affected (CNA)

Vendor / productVersions
torproject / Toraffected 0.3.5.3-alpha before 0.4.9.11

CWE

CWE-362

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.