Skip to content
OpenAdvisories

Package · Go

github.com/netbirdio/netbird

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.4
    GHSA-rxmp-8h9v-56cx

    NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner

    ## Summary A race condition vulnerability allows authenticated admin-privileged users to escalate to owner privilege. ## Details The vulnerability exists in the `updateUser` function, which is connected to the `/users/{userId}` PUT request. This function then…

    github.com/netbirdio/netbird Go
  • Critical 9.3
    CVE-2025-10678

    Admin with default credentials in NetBird VPN

    NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by ZITADEL. This issue affects instances installed using vendor's provided script. This issue may affect instances created with D…

    NetBird VPN NetBird github.com/netbirdio/netbird Go
  • High 7.5
    CVE-2024-41260

    NetBird uses a static initialization vector (IV)

    A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

    github.com/netbirdio/netbird Go