What is the CVSS score of CVE-2026-22820?

CVE-2026-22820 has a CVSS 3.1 base score of 3.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Outray are affected by CVE-2026-22820?

CVE-2026-22820 is a low-severity vulnerability (CVSS 3.7). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

Is there a public PoC exploit available for CVE-2026-22820?

Yes, a public proof-of-concept exploit is available for CVE-2026-22820. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-22820?

During next maintenance window: Apply vendor patches when convenient. Vendor patch is available.

Outray CVE-2026-22820

LOW

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-01-14 security-advisories@github.com

GHSA-3pqc-836w-jgr7

Race Condition Outray

3.7

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

3.7 LOW

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 20, 2026 - 14:52 vuln.today

Public exploit code

Patch released

Jan 20, 2026 - 14:52 nvd

Patch available

CVE Published

Jan 14, 2026 - 15:16 nvd

LOW 3.7

DescriptionGitHub Advisory

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.

AnalysisAI

Outray versions up to 0.1.5 contains a vulnerability that allows attackers to exceed the set number of active tunnels in their subscription plan (CVSS 3.7).

Technical ContextAI

affects Outray. Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5.