ExpressVPN bug has been leaking some DNS requests for years

After discovering that a fault allowed users to reveal the domains they were browsing to configured DNS servers, ExpressVPN deactivated the split tunneling capability from the most recent version of their software.

The flaw only affected users of the split tunneling feature and was first introduced in ExpressVPN Windows versions 12.23.1–12.72.0, which were released between May 19, 2022, and February 7, 2024.

For users who require both secure distant access and local access at the same time, split tunneling offers the freedom to route specific internet traffic in and out of the VPN tunnel.

Due to a problem in this feature, users’ DNS requests were sent to their internet service provider (ISP) read more ExpressVPN bug has been leaking some DNS requests for years.

Leave a Reply

Your email address will not be published. Required fields are marked *