CVE-2024-3661 Attackers can use TunnelVision to snoop on users’ VPN traffic.

[Jacky10X]

link
This affects Windows, Linux, iOS, and macOS, but not Android because Android does not support DHCP option 121.
It seems network namespaces can avoid this problem.

 

[RMerlin]

Duplicate of https://www.snbforums.com/threads/using-an-obscure-dhcp-feature-to-abuse-your-vpn-connection.89959/