The Mullvad VPN client is subject to a security vulnerability that may compromise the integrity or confidentiality of the VPN connection.

The vulnerability is currently undefined in scope and nature. The authentication requirements remain unknown, and further technical disclosure is required to assess the specific attack vector.

A CVSS score of 7.3 indicates a High severity risk. Successful exploitation could potentially allow an attacker to intercept traffic or bypass VPN security controls, leading to a loss of privacy or unauthorized network access for users relying on the client.

Immediate Action: Check the official Mullvad website for the latest software version and apply updates across all desktop and mobile installations immediately.

Proactive Monitoring: Review VPN connectivity logs for signs of unexpected session terminations or unauthorized connection attempts.

Compensating Controls: If an update is not immediately available, consider temporarily utilizing alternative secure tunnels or disabling the client if the risk of exposure outweighs the requirement for the VPN.

Public Exploit Available: false

Users and administrators should monitor official vendor channels for security patches regarding this client. Due to the critical nature of VPN software as a security control, maintaining the latest version is imperative to ensure the confidentiality of network traffic.