Skip to content

Vendor

Wormhole App vulnerabilities

1 published CVE affecting Wormhole App, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Wormhole App alerts

Products

Latest Wormhole App CVEs

Newest publication first

  1. CVE-2026-100251 Wormhole.app SSRF

    Published
    MediumCVSS 6.9 EPSS 0.26%

    Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.