Skip to content
OpenAdvisories

Package · Go

github.com/h44z/wg-portal

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-27899

    WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

    WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint wi…

    h44z wg-portal github.com/h44z/wg-portal Go
  • High —
    GHSA-2r2v-9pf8-6342

    WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

    ### Impact Users of WireGuard Portal v2 who have OAuth (or OIDC) authentication backends enabled can be affected by an Account Takeover vulnerability if they visit a malicious website. ### Patches The problem was fixed in the latest alpha release, v2.0.0-alph…

    github.com/h44z/wg-portal Go