importantSYS.SOURCE: supuk.ch• 2026-09-11T21:16:48Z
Android NAT-T Keepalive Offload Vulnerability Enables VPN Lockdown Bypass
A vulnerability in Android's NAT-T keepalive offload API allows apps to bypass VPN lockdown, enabling clear-text UDP/4500 packets to escape through non-VPN paths. The issue affects most Android 12+ devices due to misconfigured resource validation and trust model failures in the framework.
*** END OF TRANSMISSION ***