coturn — Vulnerabilities & Security Advisories 5

Coturn is an open-source STUN/TURN server implementation that enables NAT traversal for WebRTC and other real-time communication applications. Historically, it has been vulnerable to multiple remote code execution flaws, cross-site scripting attacks, and privilege escalation issues due to input validation failures and insecure default configurations. The project has addressed five CVEs to date, with several RCE vulnerabilities allowing unauthenticated attackers to execute arbitrary code through specially crafted packets. While no major public security incidents have been documented, the persistent discovery of critical vulnerabilities in its networking components highlights the importance of regular updates and hardening for production deployments.