NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner in github.com/netbirdio/netbird

Description

References

• netbirdio/netbird security advisory · ADVISORY

More vulnerabilities in github.com/netbirdio/netbird

• GHSA-rxmp-8h9v-56cxMEDIUM 4.4NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
• CVE-2025-10678CRITICAL 9.3NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by ZITADEL…
• CVE-2024-41260HIGH 7.5A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obta…