Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Tunnelblick is an open source graphic user interface for OpenVPN on macOS. In versions 3.3beta26 through 9.0beta01, any local user can read arbitrary root-owned files by exploiting a symlink following vulnerability in tunnelblick-helper, reachable through the world-accessible tunnelblickd Unix socket. The socket is configured with mode 0666, allowing any local user to connect. No authorization check is performed on the connecting client. The tunnelblick-helper process constructs a path to config.ovpn inside a user-controlled .tblk directory and reads it as root without symlink validation. An attacker can create a .tblk configuration with a symlinked config.ovpn pointing to any file and request tunnelblickd to read it. This issue has been fixed in versions 9.0beta02.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
CVE-2026-31893 Arbitrary File Read via Symlink Following in Tunnelblick Versions 3.3beta26-9.0beta01 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31893
Post summary
A new arbitrary file read vulnerability (CVE‑2026‑31893) affecting specific Tunnelblick beta versions has been identified; no PoC, exploit code, active exploitation, or patch information is included.
CVE-2026-31893 Tunnelblick is an open source graphic user interface for OpenVPN on macOS. In versions 3.3beta26 through 9.0beta01, any local user can read arbitrary root-owned files… https://www.cve.org/CVERecord?id=CVE-2026-31893
Post summary
The post announces CVE‑2026‑31893, noting that Tunnelblick versions 3.3beta26 through 9.0beta01 allow local users to read arbitrary root‑owned files; no PoC, exploit, patch, or active exploitation details are included.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tunnelblick | tunnelblick | - | - | - |
| App | tunnelblick | tunnelblick | 3.3 | - | - |
| App | tunnelblick | tunnelblick | 8.1 | - | - |
| App | tunnelblick | tunnelblick | 8.1 | - | - |
| App | tunnelblick | tunnelblick | 8.1 | - | - |
| App | tunnelblick | tunnelblick | 9.0 | - | - |