ExpressVPN has addressed a vulnerability in its Windows client that allowed Remote Desktop Protocol (RDP) traffic to bypass the VPN tunnel, potentially exposing users' real IP addresses. The issue stemmed from leftover debug code in production builds, and the company has since released a patch to fix it, urging users to update to the latest version for improved security. While the leak affected a small number of users primarily using RDP, ExpressVPN will enhance its internal checks to prevent similar issues in the future.