SecurityReported
Tor security report identifies format string bug in consensus generation
Published · Updated
A security report identified an incorrect format string in Tor's consensus generation that the report says allowed three colluding directory authorities to prevent consensus publication. The project labeled the severity as low because exploitation requires control of multiple authorities. A comment by @arma states the issue is listed as fixed in 0.4.9.15 as of commit 407ccd28a.
Why it matters
The report states that three colluding directory authorities can wedge consensus on all honest authorities, resulting in a network-wide DoS.
Event status Released
Read the sources
- TROVE-2026-072: [security] Incorrect format string issue in consensus generation gitlab.torproject.org
- Public comment by @nickm gitlab.torproject.org
- Public comment by @arma gitlab.torproject.org
This is an AI-assisted summary of the linked public sources. Consult the original reports for details and operator guidance.