Xray-core concealed a certificate verification bypass vulnerability
A security researcher has accused the developers of Xray-core of concealing a certificate verification bypass vulnerability for six months. The issue allegedly leaves users susceptible to man-in-the-middle attacks, contradicting the developers' previous claims regarding security features.
Why it matters
This highlights the risks associated with open-source proxy software and the importance of transparency in vulnerability disclosure.
net4people / bbs Public Notifications You must be signed in to change notification settings Fork 126 Star 5.3k Code Issues 552 Pull requests 0 Actions Wiki Security and quality 0 Insights Additional navigation options Code Issues Pull requests Actions Wiki Security and quality Insights Popular proxy software Xray-core covered up a certification verification bypass vulnerability for half a year #672 New issue Copy link New issue Copy link Open Open Popular proxy software Xray-core covered up a certification verification bypass vulnerability for half a year #672 Copy link Description dyhkwong opened on Oct 2, 2026 Issue body actions Disclaimer: I am the reporter of the vulnerability.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in