CVE-2026-44599

MEDIUM 5.3CVE-2026-44599 · Published 07/05/2026 · updated 26/10/2026

In short

CVE-2026-44599 is a MEDIUM (CVSS 5.3) vulnerability affecting tor (torproject).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.3% of all vulnerabilities.
Fix: update to 0.4.9.7 or later.

Package	Affected versions	Patched versions
tor torproject	`< 0.4.9.7`	`0.4.9.7`

Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 0.4.9.7

0.4.9.7

More vulnerabilities in tor

See all →