diff --git a/pkgs/servers/coturn/default.nix b/pkgs/servers/coturn/default.nix
index c32ddecc7a36..dba65cafd0c8 100644
--- a/pkgs/servers/coturn/default.nix
+++ b/pkgs/servers/coturn/default.nix
@@ -15,6 +15,11 @@ stdenv.mkDerivation rec {
 
   patches = [
     ./pure-configure.patch
+    (fetchpatch {
+      name = "CVE-2020-26262.patch";
+      url = "https://github.com/coturn/coturn/commit/abfe1fd08d78baa0947d17dac0f7411c3d948e4d.patch";
+      sha256 = "sha256-BuC5IEPWr82W8s9RTGDReYdkL0FAPPsXzDXzfHxya6Q=";
+    })
   ];
 
   meta = with stdenv.lib; {