https://sudonull.com/vless-vulnerability-bypassing-split-tunneling-in-clients
Critical hole in VLESS clients (xray/sing-box) allows spyware to bypass VpnService and leak IP. Tested 8 clients, Happ dumps configs. Protection measures and recommendations for developers. Study the risks.