Dragonfly mTLS Certificate Validation Vulnerability in Certificate gRPC Service

A vulnerability exists in Dragonfly versions prior to 2.1.0, allowing peers to obtain valid TLS certificates for arbitrary IP addresses. This flaw undermines the mutual TLS (mTLS) authentication, as the Manager's Certificate gRPC service fails to verify whether the requested IP addresses correspond to the peer's actual connection IP. The vulnerability arises because the service does not ensure that the peer is requesting a certificate for an IP address it is connected from.

Impact

Exploitation of this vulnerability allows for the issuance of mTLS certificates for any IP address, bypassing the intended authentication mechanism.

Remediation

Users can upgrade to Dragonfly version 2.1.0 or later to address this vulnerability.