Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allow trusted.net' entry to use the proxy despite deny-by-default ACLs.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 09 Nov 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allow trusted.net' entry to use the proxy despite deny-by-default ACLs. | |
| Title | Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match | |
| First Time appeared |
Tinyproxy Project
Tinyproxy Project tinyproxy |
|
| Weaknesses | CWE-187 | |
| CPEs | cpe:2.3:a:tinyproxy_project:tinyproxy:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Tinyproxy Project
Tinyproxy Project tinyproxy |
|
| References |
|
|
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-11-09T23:27:42.645Z
Reserved: 2026-11-09T22:03:04.330Z
Link: CVE-2026-125371
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses