Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

2dust/v2rayNG

              master @ f226ace
            

Fixes

CVEs

MEDIUM

Peak severity

66.7%

Coverage

Highlights

Bypass: 1 prior fix. Scrutinize any change in this area.

V2RayVpnService.kt: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Bypass: Incomplete routing or firewall rules when sharing LAN connections can allow IPv6 traffic to bypass the VPN tunnel entirely, leaking raw user traffic. Developers must ensure all tethered/shared interface traffic is either explicitly routed into the tunnel or blackholed via iptables/ip6tables.

Unprotected Broadcast Receiver: Registering dynamic broadcast receivers without specifying export restrictions allows malicious co-located applications on the device to inject spoofed intents and trigger unauthorized operations. Developers must enforce RECEIVER_NOT_EXPORTED for internal signals.

Information Disclosure: Using registered public IP address blocks (such as DoD-allocated ranges) for the internal VPN tun interface instead of private RFC 1918/4193 addresses can cause WebRTC or routing queries to leak false location data or misroute internal packets to the public internet.