http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en/blog/2019/12/6/closer-look-vpn-vulnerability-cve-2019-14899
If you use the Mullvad app on Linux with local network sharing enabled, you are vulnerable to the first of three stages of the attack. A fix will be included in the next version of the app, due to be released next week. Read on for more details. In order to exploit the vulnerability, an attacker needs to be on the same local network as your device.