[ls612]

Are there workarounds VPN clients can use to prevent this attack from working (or in the worst case, disconnect rather than send traffic outside the tunnel on a hostile network)?

[betaby]

Yes. On Linux there are methods to put VPN in a namespace and thus avoid the issue.