CVE-2026-77641 | Tor Project prior 0.4.9.9 Conflux Switch Cell relay_send_command_from_edge null pointer dereference

August 20, 2026 Yanac

A vulnerability marked as critical has been reported in Tor Project Tor. Affected is the function relay_send_command_from_edge of the component Conflux Switch Cell. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-77641. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More