CVE-2023-33983: Briarproject Briar

High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.

Affected products

• Briarproject Briar: up to and including 1.5.3

Published 2023-05-24. Last modified 2026-06-17.