BastionGuard™ — Transparent, open-source endpoint security for Linux and Android.
Security

Security

Security

BastionGuard Security Center

Security advisories, coordinated vulnerability disclosure, official CVE records, supported releases, and acknowledgments for responsible security research.

7Published advisories
0Official CVE records
2.0.4Current supported release

Report a vulnerability

Send a confidential security report directly to the BastionGuard Security Team.

Report securely

Disclosure policy

Review our scope, response targets, safe-harbor principles, and coordinated-disclosure process.

Read the policy

Security advisories

Review affected components, severity, versions, fixes, public references, and researcher credits.

View advisories

BastionGuard CVEs

View official CVE records synchronized from the CVE Program CVE List.

View CVE records

Acknowledgments

Recognize researchers who helped improve BastionGuard through responsible disclosure.

View acknowledgments

Security contact

Contact the team using the published security address and standardized security.txt endpoint.

Send email
Support status

Supported BastionGuard releases

Security fixes are provided for supported releases. Users should upgrade promptly when a security update is published.

VersionStatusGuidance
2.0.4SupportedCurrent stable release
2.0.3UnsupportedSecurity update required
2.0.2SupportedCurrent stable release
2.0.1UnsupportedSecurity update required
2.0UnsupportedSecurity update required
Latest publications

Recent security advisories

All advisories
High BGSA-2026-007

Command Injection in External URL Opening

CMS fields Advisory: Command Injection in External URL Opening Advisory ID: BGSA-2026-007 (proposed; confirm availability) Reporter reference: BG-05 (URL handler) CVE: Not assigned Severity: Medium (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 —…

Component
External URL
Affected
2.0.3
Fixed
2.0.4
Read advisory
High BGSA-2026-006

Insufficient TLS Certificate Verification for Banking List Downloads

CMS fields Advisory: Insufficient TLS Certificate Verification for Banking List Downloads Advisory ID: BGSA-2026-006 (proposed; confirm availability) Reporter reference: BG-05 (TLS) CVE: Not assigned Severity: High (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3…

Component
Banking List
Affected
2.0.3
Fixed
2.0.4
Read advisory
Critical BGSA-2026-005

Privilege Escalation via WireGuard Configuration Parameters

CMS fields Advisory: Privilege Escalation via WireGuard Configuration Parameters Advisory ID: BGSA-2026-005 (proposed; confirm availability) Reporter reference: BG-04 CVE: Not assigned Severity: Critical (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 — commit bb3a210…

Component
WireGuard Configuration
Affected
2.0.3
Fixed
2.0.4
Read advisory