# CVE-2026-44599: Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Source: https://junglewise.ai/threats/cve-2026-44599-tor-before-0-4-9-7-can-attempt-or-accept-begin-dir-via-conflux  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-07  
License: CC BY 4.0 with a link back

CVE-2026-44599 · Severity: low · CVSS 3.7 · Published 2026-05-07

Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Technologies: [Torproject Tor](https://junglewise.ai/threats/technologies/tor). Vendors: [Torproject](https://junglewise.ai/threats/vendors/torproject).

## Quick answers

**Is CVE-2026-44599 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44599 being exploited in the wild.

**How severe is CVE-2026-44599?** Low severity, with a CVSS score of 3.7, published 7 May 2026.

**Which products and versions are affected?** Torproject Tor. The advisory does not name versions.

**Is there a fix for CVE-2026-44599?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-44599?** Check whether you run Torproject Tor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Torproject Tor

## Related threats

- [Tor out-of-bounds write in signature parsing](https://junglewise.ai/threats/cve-2026-77642-tor-out-of-bounds-write-in-signature-parsing)
- [Tor use-after-free in CONFLUX_SWITCH cell handling](https://junglewise.ai/threats/cve-2026-77641-tor-use-after-free-in-conflux-switch-cell-handling)
- [Tor infinite loop in zlib/gzip decompression](https://junglewise.ai/threats/cve-2026-77640-tor-infinite-loop-in-zlib-gzip-decompression)
- [Tor compression bomb bypass in gzip/zlib stream handling](https://junglewise.ai/threats/cve-2026-77639-tor-compression-bomb-bypass-in-gzip-zlib-stream-handling)
- [Tor race condition in onion service rendezvous](https://junglewise.ai/threats/cve-2026-77638-tor-race-condition-in-onion-service-rendezvous)