Skip to content
OpenAdvisories

Package · Go

github.com/h44z/wg-portal

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2026-27899

    WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

    WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint wi…

    h44z wg-portal github.com/h44z/wg-portal Go
  • Medium 6.1
    GHSA-grh9-37g7-53mj

    WireGuard Portal v2 has Open Redirect Vulnerability in OAuth Authentication Flow

    ### Summary An Open Redirect vulnerability exists in the OAuth authentication flow that allows attackers to redirect users to external malicious websites after authentication. The vulnerability is caused by insufficient validation of the return parameter in t…

    github.com/h44z/wg-portal Go
  • High —
    GHSA-2r2v-9pf8-6342

    WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

    ### Impact Users of WireGuard Portal v2 who have OAuth (or OIDC) authentication backends enabled can be affected by an Account Takeover vulnerability if they visit a malicious website. ### Patches The problem was fixed in the latest alpha release, v2.0.0-alph…

    github.com/h44z/wg-portal Go