CVE-2010-0385: Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, al...

Security readout for executives and security teams

This issue exposed sensitive Tor bridge information from a narrow server role: bridge directory authorities. If affected, an attacker could learn bridge identities and descriptors, weakening privacy protections for users relying on hidden bridge access. Exposure appears limited to organizations operating Tor bridge directory authority infrastructure on the affected versions. Ordinary Tor clients, relays, and bridges are not identified as affected in the supplied sources. Prioritize if the organization operated Tor bridge directory authority infrastructure in 2010-era deployments or maintains legacy Tor systems. Otherwise, business exposure is likely low. Mitigation focus: Upgrade affected Tor 0.2.1.x systems to 0.2.1.22 or later.; Upgrade affected Tor 0.2.2.x systems to 0.2.2.7-alpha or later.; Confirm whether any system operates as a bridge directory authority..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.