Skip to content
OpenAdvisories

Package · Go

github.com/netbirdio/netbird

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner

    ## Summary A race condition vulnerability allows authenticated admin-privileged users to escalate to owner privilege. ## Details The vulnerability exists in the `updateUser` function, which is connected to the `/users/{userId}` PUT request. This function then…