CVE-2026-77638: tor: Tor: Onion Service Impersonation via Race Condition

Severity: Critical

CVSS Score: 9

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.