A vulnerability, which was classified as critical, was found in Tunnelblick up to 9.0beta01. Affected by this issue is some unknown functionality. The manipulation results in symlink following.

This vulnerability is known as CVE-2026-31893. Attacking locally is a requirement. No exploit is available.

You should upgrade the affected component.