Mullvad VPN relay audit [pdf]

See also https://news.ycombinator.com/item?id=31838852

Some weird impact assessments here. LPE from OpenVPN user to root is not high impact, these are VPN servers, they don't host anything else.