github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-03-13 21:54:17 -05:00
Code Issues 144 Packages Projects Releases 116 Wiki Activity

Android: Potential security issue: Trying to connect to an unexpected IP #1315

New Issue
Closed
opened 2025-11-26 22:44:30 -06:00 by GiteaMirror · 3 comments
GiteaMirror commented 2025-11-26 22:44:30 -06:00
Owner
Copy Link

Originally created by @tomturton on GitHub (Jul 17, 2021).

Using the Android app v2.11.0.

I am self-hosting VaultWarden. I am trying to access VW on a local network with a domain registered on my local DNS.
When trying to connect the Android client to my server (both on the same local network), the request is timing out with following error:

vaultwarden.mydomain.net/3.223.115.185 (port 443) from 192.168.1.113 (port 43768)
isConnected failed

I am alarmed by the attempted connection to 3.223.115.185 (seems to be an AWS address).

Steps To Reproduce

  1. At Bitwarden client login page, tap the cog to enter settings
  2. Change the Server URL to local domain.
  3. Tap 'Save'
  4. Tap 'Log in'
  5. Enter VaultWarden credentials and tap 'Log in'

Environment

  • Pixel 5
  • Android 11
  • Bitwarden Client 2.11.0
  • VaultWarden 2.19.0 running in a docker container on a Synology NAS
Originally created by @tomturton on GitHub (Jul 17, 2021). Using the Android app v2.11.0. I am self-hosting VaultWarden. I am trying to access VW on a local network with a domain registered on my local DNS. When trying to connect the Android client to my server (both on the same local network), the request is timing out with following error: ``` vaultwarden.mydomain.net/3.223.115.185 (port 443) from 192.168.1.113 (port 43768) isConnected failed ``` I am alarmed by the attempted connection to 3.223.115.185 (seems to be an AWS address). ## Steps To Reproduce 1. At Bitwarden client login page, tap the cog to enter settings 2. Change the Server URL to local domain. 3. Tap 'Save' 4. Tap 'Log in' 5. Enter VaultWarden credentials and tap 'Log in' ## Environment - Pixel 5 - Android 11 - Bitwarden Client 2.11.0 - VaultWarden 2.19.0 running in a docker container on a Synology NAS
GiteaMirror commented 2025-11-26 22:44:30 -06:00
Author
Owner
Copy Link

@SergeantConfused commented on GitHub (Jul 18, 2021):

Hi @tomturton,

  1. What is the IP address of your local bitwarden_rs server?
  2. Is this IP address (3.223.115.185) present in your local configuration? Do you have a DNS record pointing to it?
  3. Where do you see this error message on your Android device, exactly?

Thank you in advance,

@SergeantConfused commented on GitHub (Jul 18, 2021): Hi @tomturton, 1. What is the IP address of your local bitwarden_rs server? 2. Is this IP address (3.223.115.185) present in your local configuration? Do you have a DNS record pointing to it? 3. Where do you see this error message on your Android device, exactly? Thank you in advance,
GiteaMirror commented 2025-11-26 22:44:31 -06:00
Author
Owner
Copy Link

@tomturton commented on GitHub (Jul 19, 2021):

Hi @SergeantConfused

  1. 192.168.1.104
  2. To my knowledge, no. I certainly haven't manually entered that IP anywhere.
  3. In the Bitwarden mobile client, upon trying to log in to my VaultWarden server/account.
@tomturton commented on GitHub (Jul 19, 2021): Hi @SergeantConfused 1. 192.168.1.104 2. To my knowledge, no. I certainly haven't manually entered that IP anywhere. 3. In the Bitwarden mobile client, upon trying to log in to my VaultWarden server/account.
GiteaMirror commented 2025-11-26 22:44:31 -06:00
Author
Owner
Copy Link

@vvolkgang commented on GitHub (Jun 20, 2024):

Issue migrated to https://github.com/bitwarden/mobile/issues/1466

@vvolkgang commented on GitHub (Jun 20, 2024): Issue migrated to https://github.com/bitwarden/mobile/issues/1466
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#1315
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?