CVE-2023-33965: Brook's tproxy server is vulnerable to a drive-by command injection.

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-01 · updated 2026-06-17
Weakness: CWE-78

Description

Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.

Affected products

txthinking brook: before 20230606 — fixed in 20230606

How to fix

Upgrade to a fixed version: txthinking brook 20230606. Check the vendor advisory for mitigations.

References

https://github.com/txthinking/brook/commit/314d7070c37babf6c38a0fe1eada872bb74bf03e
https://github.com/txthinking/brook/security/advisories/GHSA-vfrj-fv6p-3cpf
https://github.com/txthinking/brook/commit/314d7070c37babf6c38a0fe1eada872bb74bf03e
https://github.com/txthinking/brook/security/advisories/GHSA-vfrj-fv6p-3cpf

Get alerted when CVE-2023-33965 or the next vulnerability affects your stack