netbird

v0.83.1

netbirdio/netbird

NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®

Compare View on GitHub

Maintenance: Active365 commits in 3 months · bus factor 3
License: OtherUnknown
Security: 9 advisories5 high, 4 medium · Scorecard 6.4/10
Supported versions: No scheduleendoflife.date does not track this project

31k stars · 1.9k forks · 788 open issues · last release 2 days ago · data checked 4 hours ago

Overview Tour Releases Docker images Security Logos

Breaking changes

What to check before upgrading, taken from the notes of the last 30 releases.

v0.83.0Nov 12, 2026
⚠️ Breaking changes: profile ownership and daemon access control
Each profile now has an owner, and local users can control only their own profiles as the daemon has a new IPC authorization layer. Single-user desktops and headless peers registered with a setup key and auto-start (the default) need no action. They reconnect on their own after the upgrade. Act only if one of the cases below applies to you. #7407
| Who is affected | Impact | What to do |
| --- | --- | --- |
| You connect to the daemon with --daemon-addr tcp://… | The daemon refuses all TCP requests. | Before upgrading, switch to the default Unix socket or Windows named pipe. 📖 TCP sockets |
| A regular user or script runs netbird commands on a headless machine (no console login, SSH and RDP don't count) | Commands fail because nobody owns the default profile. | Run sudo netbird up once, or run sudo netbird profile claim default --owner . 📖 Headless setup |
| Several local users use NetBird on one machine | Users see and control only their own profiles. Profiles added with sudo belong to root. | Add profiles as the user who will use them. To share a profile, set NB_DISABLE_PROFILE_OWNERSHIP=true (see below). 📖 Share a profile |
Existing profiles migrate automatically on the first start. 📖 Upgrade from an earlier version
New: To limit daemon access to one group, use netbird service install --allow-group . 📖 Restrict daemon access
Opting out: Set these variables with netbird service install --service-env …:
| Variable | Effect |
| --- | --- |
| NB_DISABLE_PROFILE_OWNERSHIP=true | Turns ownership off, so all local users share all profiles. Use it together with --allow-group. |
| NB_DISABLE_DEFAULT_PROFILE_CLAIM=true | Leaves the default profile without an owner until an administrator claims it. Recommended on servers. |
📖 Profile ownership and daemon access · Troubleshooting