GO-2026-4654

vendorUSosv

Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

view advisory published 2026-03-11Licence: per source

Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-29195USmedium6.5OT elevated—
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning th…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan