Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint

概要

参考情報

• gravitl/netmaker security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-29771 · ADVISORY
• gravitl/netmaker · PACKAGE

github.com/gravitl/netmaker のその他の脆弱性

• CVE-2026-32599中 5.3Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQ…
• CVE-2026-38651高 8.2Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to valid…
• CVE-2026-29196中 4.3Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys o…
• CVE-2026-29195中 6.5Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prev…
• CVE-2026-29194高 8.1Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. …