A vulnerability in Tor versions prior to 0.4.9.7 allows the software to attempt or accept BEGIN_DIR commands via conflux legs. This issue is identified as CVE-2026-44599 and is tracked as TROVE-2026-008. The vulnerability has a low severity rating and a CVSS score of 3.7.