A worrying ExpressVPN flaw may have been leaking user info online for years — but you might not need to be too concerned

Top VPN provider ExpressVPN was notified of a bug in one of its products, and was forced to disable a popular feature until they can deploy a fix.

In a blog post, the company said Attila Tomaschek, a VPN expert and CNET’s staff writer, reached out recently after having observed DNS requests on his Windows computer not being redirected to ExpressVPN’s dedicated servers, as they should have been. Tomaschek was using the Version 12 app for windows, and had the split tunneling feature turned on.