CVE-2020-15590

CVE-2020-15590 is a high-severity vulnerability affecting Private Internet Access (PIA) VPN Client for Linux versions 1.5 through 2.3+. It allows remote attackers to bypass the VPN's kill switch mechanism, leading to sensitive information disclosure by intercepting network traffic. The vulnerability arises when net.ipv4.ip_forward is enabled, allowing privileged applications (e.g., Docker containers) to leak the host IP even when the kill switch is active. With a CVSS score of 7.5, this vulnerability has a network attack vector and low attack complexity, potentially resulting in high confidentiality impact. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.