Skip to content
OpenAdvisories

Package · Go

github.com/m1k1o/neko/server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2026-116679

    Neko: Authorization bypass in legacy WebRTC input handling

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost() e…

    m1k1o neko github.com/m1k1o/neko/server Go
  • High 8.8
    CVE-2026-39386

    Neko has Self-service Privilege Escalation for Authenticated Users

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance (member management, roo…

    m1k1o neko github.com/m1k1o/neko/server Go