Two medium-severity egress policy bypass vulnerabilities found in Harden-Runner

Two medium-severity vulnerabilities (CVE-2026-32946 and CVE-2026-32947) have been disclosed in Harden-Runner (Community Tier). Both allow egress policy bypass: one via DNS over TCP and the other via DNS over HTTPS (DoH). These issues could enable unauthorized network traffic to circumvent established egress controls.