CVE-2021-21382

CVE-2021-21382 is a critical vulnerability affecting the wire restund TURN server, allowing an authenticated attacker to bypass network segmentation. By manipulating the XOR-PEER-ADDRESS, an attacker can instruct the TURN server to open a relay to the loopback address range, exposing services running on localhost, such as restund's administrative status interface. This vulnerability carries a CVSS score of 9.6 (CRITICAL) due to its network attack vector, low attack complexity, and high impact on confidentiality and integrity, potentially allowing administrative command execution. While no active exploitation or public exploit code is currently reported, and community discussion is minimal, the potential for unauthorized access to internal services makes this a significant risk.