CVE-2026-102339

The Telepresence tool, prior to version 2.31.0 , is vulnerable to active client session hijacking. The Traffic Manager Tunnel gRPC streaming endpoint parses a session ID from a caller-controlled message in pkg/tunnel/message.go and passes it to state.Tunnel without verifying ownership. An attacke...