"Error 401: Unauthorized access" when using TunnelBear extension

I encountered this strange behavior in the web interface of our MOBOTIX M16B cameras. As soon as I have the browser extension TunnelBear activated I get this error message:

Its VPN function is not even activated but still it somehow interferes with the web interface.

My browser:

Brave 1.91.171 (Official Build) (64-Bit)
Chromium: 149.0.7827.103

TunnelBear VPN Chrome extension:

Version 4.2.0

Camera details:

MOBOTIX M16B
Board-Revision: 6.4
Version: MX-V5.4.9.9-r1
ActiveX-Version: 1.8.8.0

OS (I don’t think it’s relevant, just for the sake of completeness):

Windows 11 IoT Enterprise LTSC Version 24H2 (Build 26100.8246)

I think this should be easy to reproduce.

Thank you for reporting this and for providing such detailed information.

Based on the behavior you described and our initial analysis, we currently believe this is related to the TunnelBear browser extension rather than the MOBOTIX camera firmware or web server itself.

The key observations are:

  • The issue is reproducible whenever the TunnelBear extension is enabled.
  • The issue disappears immediately when the extension is disabled.
  • The behavior remains unchanged when switching the camera authentication method from Auto to Digest.
  • The VPN tunnel itself does not need to be active for the issue to occur.

These findings suggest that the extension is likely modifying or interfering with the browser’s HTTP communication, authentication handling, or session management before the requests reach the camera.

Since the camera operates normally without the extension and the same behavior is observed across different authentication settings, we currently classify this as a third-party browser extension compatibility issue rather than a defect in the MOBOTIX camera firmware.

Thank you again for bringing this to our attention. If anyone else in the community is using TunnelBear or a similar privacy/security extension and can reproduce the behavior, we would be very interested in hearing about your findings.

bye Jörg