CVE-2021-41767

CVE-2021-41767 is a medium-severity vulnerability affecting Apache Guacamole versions 1.3.0 and older. It allows an authenticated user with existing connection permissions to potentially view or interact with another user's active session on the same connection due to the incorrect inclusion of a private tunnel identifier in REST responses. The attack requires low privileges and network access, leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.