Posted 2/11/2024, 3:09:18 PM
ExpressVPN Bug Leaks Some User Data, Disable Split Tunneling Temporarily Removed
- ExpressVPN found a bug that leaked some DNS requests when using the split tunneling feature on Windows (versions 12.23.1 - 12.72.0)
- The bug caused some DNS requests to be sent to the user's ISP rather than ExpressVPN's private DNS server
- This allowed ISPs to see which domains users visited, breaking ExpressVPN's privacy promises
- The issue impacts about 1% of ExpressVPN's Windows users and only when "Only allow selected apps" split tunneling mode was active
- ExpressVPN removed the split tunneling feature in the latest Windows update (v12.73.0) and plans to reintroduce it once the bug is fixed