[Security][Bug] Prevent binding to all TCP interfaces (#5752)

2025-05-06 03:21:45 +08:00
parent a68ed76682
commit 683707c314
1 changed files with 2 additions and 1 deletions
@@ -225,7 +225,8 @@ class MessageQueue:
            remote_subscribe_port = get_open_port()
            if is_valid_ipv6_address(connect_ip):
                self.remote_socket.setsockopt(IPV6, 1)
-            socket_addr = f"tcp://*:{remote_subscribe_port}"
+                connect_ip = f"[{connect_ip}]"
+            socket_addr = f"tcp://{connect_ip}:{remote_subscribe_port}"
            self.remote_socket.bind(socket_addr)

        else: