FanglidingXray-core 代码贡献者

作者发言

GitHub·2026.10.30 04:17:28（UTC+8）

Fangliding：补充说明 Go MPTCP listener 安全提案的关联性尚未确认

在 golang/go issue #82717 中，Fangliding 引用安全研究并指出 Linux MPTCP listener 可被攻击，而 Go listener 默认启用 MPTCP，可能使 Go 程序暴露于该风险；他提议默认关闭 listener 侧 MPTCP，并在后续说明中明确目前尚不清楚该漏洞是否与 MPTCP 有强关联。该条是已发布安全提案的修订，保留可能性和未确认因果的限定，不写成已确认漏洞或已合入修复。

作者原文@Fangliding

Proposal Details

See https://www.anthropic.com/research/discovering-vulnerabilities-with-claude
Linux MPTCP listener can be attacked, and go listener listen MPTCP by default in https://github.com/golang/go/commit/3d4daa38a763260e07f4745110f2b5fcbec25126
This may expose all golang programs to this vulnerability

NOTE: It is currently unknown whether this vulnerability is strongly related to MPTCP