Post #2483272

2026-05-12 09:50 UTC

A new VPN leak that allows any app to leak traffic outside the VPN tunnel has recently been discovered by Yusuf (https://x.com/cybaqkebm) Read more here: https://mullvad.net/blog/any-app-on-recent-android-versions-can-leak-certain-traffic

Replies (5)

@fluffgar@mastodon.scot 2026-05-12 10:05

@mullvadnet@mastodon.online "at the time of writing the issue is marked as inaccessible by Google for unknown reasons. In contrast, GrapheneOS, a security-focused Android-based OS, quickly patched the issue in its codebase." Tracks with google's record of super-sus behaviour. Well done on @GrapheneOS@grapheneos.social for patching it in theirs.

Open ##2726227
@leo@gts.heitmannruiz.org 2026-05-12 10:05

@mullvadnet@mastodon.online seems like the technical details section in the blog post is duplicated?

Open ##2726229
@ee@mastodon.nl 2026-05-12 10:31

@mullvadnet@mastodon.online For those who want to visit Yusuf’s profile without visiting the X site: https://xcancel.com/cybaqkebm

Open ##2726231
@poliorcetics@social.treehouse.systems 2026-05-12 11:54

@mullvadnet@mastodon.online the paragraph « Technical details » is duplicated

Open ##2726232
@jahabof1794@fosstodon.org 2026-05-12 14:38

@mullvadnet@mastodon.online I was already losing hope when reading the mitigation method then the conclusion saved me since I am using GrapheneOS. Thank you very much for this information.

Open ##2726234