ExpressVPN

Help us improve the security and privacy of ExpressVPN users.

  • $150 – $2,500 per vulnerability
  • Up to $100,000 maximum reward
  • Safe harbor
Submit report

More client application updates coming your way

We made some minor fixes to our client applications this month. We have previously featured Lightway TCP and our auto-update functionality for our routers, and they continue to be of interest to us. We invite you to keep hacking at these features!

Here is a summary of our updates this month:

[PUBLIC BETA] ExpressVPN for Mac 10.2.4 PUBLIC BETA
Bug fixes

[RELEASE] ExpressVPN for Routers v2.7.2
Bug fixes

[RELEASE] ExpressVPN for Windows 10.2.2
Bug fixes

[RELEASE] ExpressVPN for Android v10.2.2
Security fix related to an upstream bug (CVE-2021-3336) in wolfSSL that affected only Lightway – TCP, a protocol currently in preview. We blocked Lightway – TCP on our servers for all affected versions on March 18, and this update fixes the bug and restores connectivity for Lightway – TCP. We found the bug through our routine internal security audits, and we have no evidence that it was ever exploited..

Remember that you can access our beta builds by following our guide on how to be an ExpressVPN beta user!

Happy hunting!

Walter
Walter