PT-2026-141194

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl string processing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an...