Times Of India Report

Dunno how many people would use the built in VPN in Android rather than software provided by the VPN vendor, but if you were, you'd probably also care if it turned out to be insecure.

As long as you dont send anything in plain txt then if you were affected by this flaw the man in the middle would have a copy of the encrypted traffic.
I know the vpn I use on my phone is encrypted to buggery for work purposes. Makes it nice and slow but secure lol

Indeed. Ideally you'd want to be using the VPN 'tunnel' then encrypting everything that travelled along it anyway i.e. by using SSL/TLS.