Skip to content
OpenAdvisories

Vendor

Wormhole App

1 known vulnerabilities.

Products

Wormhole 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-100251

    Wormhole.app SSRF

    Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP.

    Wormhole App Wormhole