< BACK TO NEWS
importantSYS.SOURCE: supuk.ch2026-09-11T21:16:48Z

Android NAT-T Keepalive Offload Vulnerability Enables VPN Lockdown Bypass

A vulnerability in Android's NAT-T keepalive offload API allows apps to bypass VPN lockdown, enabling clear-text UDP/4500 packets to escape through non-VPN paths. The issue affects most Android 12+ devices due to misconfigured resource validation and trust model failures in the framework.

Comments

Read original article

*** END OF TRANSMISSION ***