Ip masq agent: Security fixes for CVE-2024-7598, CVE-2025-13281, CVE-2025-1767, CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730,…
Affects ip-masq-agentSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited · patch available : update ip-masq-agent when convenient.
Data as of 10/25/2026, 04:40:09 UTC
No CVSS score from NVD or the CNA
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 23% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| ip-masq-agent | Affected
| Fixed in– |
AI-suggested
Apply the official patches provided by the vendor in the updated releases of ip-masq-agent. Since patchAvailable is true and the vendor advisory confirms fixes, upgrading to the fixed versions is the recommended remediation.
Description
Multiple security vulnerabilities affect the ip-masq-agent package, including CVE-2024-7598. These issues have been addressed in later releases of the software. The vulnerabilities relate to concurrency issues as indicated by CWE-362. No known exploits are reported in the wild. A patch is available to remediate these vulnerabilities.
Impact
The vulnerabilities could allow for race conditions or other concurrency-related issues that might impact the security or stability of systems running affected versions of ip-masq-agent. However, there are no known exploits in the wild, and the overall severity is assessed as medium.
Weaknesses
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (opens in a new tab)
Class weaknessLikelihood of exploit: MediumOWASP Top 10 A06:2025: Insecure Design (opens in a new tab)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
References
- msrc.microsoft.com/csaf/vex/2025/msrc_cve-2024-7598.json (opens in a new tab)
- support.microsoft.com/lifecycle (opens in a new tab)
- first.org/cvss (opens in a new tab)
- github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CM33443.json (opens in a new tab)
- osv.dev/vulnerability/CVE-2024-7598 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-13281 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-1767 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-47911 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-58190 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61726 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61727 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61728 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61729 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61730 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61731 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-61732 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-68119 (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-68121 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-25679 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-27139 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-27142 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-32280 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-32281 (opens in a new tab)