CVE-2026-73212
Description
A flaw was found in Coturn. An authenticated client using the RFC 6062 TCP CONNECT relay path can bypass intended IPv4 denied-peer-ip range restrictions due to improper canonicalization of IPv4-compatible, 6to4, and NAT64 address forms. This vulnerability can lead to Server-Side Request Forgery (SSRF) and potentially remote code execution (RCE) within the internal network.
Statement
Coturn is not shipped in any Red Hat product. The Fedora and EPEL community builds ship coturn version 4.17.2, which already includes the fix for this issue (fixed in 4.13.1) and are therefore not affected.
Mitigation
Upgrade to coturn version 4.13.1 or later.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Application Data
An attacker may use an unexpected numerical base to access private application resources.
Integrity
Technical Impact: Bypass Protection Mechanism; Alter Execution Logic
An attacker may use an unexpected numerical base to bypass or manipulate access control mechanisms.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
