Tor versions before 0.4.9.7 contain a vulnerability where receiving a CERT cell out of order causes a NULL pointer dereference, leading to a denial of service condition. This issue is tracked as CVE-2026-44602 and is also known as TROVE-2026-006. The vulnerability has a low severity rating with a CVSS score of 3.7.