A new technical report details a vulnerability in Android that allows internet traffic to bypass strict VPN lockdown protections by exploiting the NAT-T keepalive offload feature. This flaw effectively leaks data outside the secure tunnel, undermining the core privacy guarantees of the lockdown mode. Users relying on these strict network restrictions should monitor for official security patches to address the bypass.