CVE-2026-22820

Low

Low Medium High Critical

CVSS Score

Published: Jan 14, 2026

Last Modified: Jan 14, 2026

Vulnerability Description

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.

References & Resources

https://github.com/outray-tunnel/outray/commit/08c61495761349e7fd2965229c3faa8d7b1c1581
security-advisories@github.com
https://github.com/outray-tunnel/outray/security/advisories/GHSA-3pqc-836w-jgr7
security-advisories@github.com

Severity Details

out of 10.0

Low

Key Information

Published Date: January 14, 2026

External Resources

NIST NVD

National Vulnerability Database

CVE Details

Detailed vulnerability info

MITRE CVE

Official CVE record

CVE Vulnerabilities