netbird
v0.83.1NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
- Maintenance
- Active365 commits in 3 months · bus factor 3
- License
- OtherUnknown
- Security
- 9 advisories5 high, 4 medium · Scorecard 6.4/10
- Supported versions
- No scheduleendoflife.date does not track this project
31k stars · 1.9k forks · 788 open issues · last release 2 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 9 most recent advisories published by the maintainers: 5 high, 4 medium. Check the patched version against the one you run.
- highGHSA-4g2w-p87c-hxchSep 1, 2026Local Privilege Escalation in Netbird from v0.23.0 to v0.48.0 via MSI Repair Execution
- Affected
- >= 0.23.0, < 0.49.0
- Patched in
- 0.49.0
- highGHSA-jxxc-7jxf-v8hmSep 1, 2026SSH server reaches vulnerable x/crypto/ssh paths fixed in 0.52.0
- Affected
- >= 0.20.8, < 0.74.4
- Patched in
- 0.74.4
- highCVE-2026-105429Sep 1, 2026[H28] SSH config Match line injection via peer FQDN / hostname
- Affected
- >= 0.60.0, < 0.74.7
- Patched in
- 0.74.7
- mediumGHSA-28q5-j9qm-gx35Sep 1, 2026Arbitrary Root File Read via Unauthenticated NetBird Daemon Socket
- Affected
- >= 0.75.0, < 0.76.1
- Patched in
- 0.76.1
- mediumCVE-2026-105430Aug 31, 2026[H16] Relay server gob-decoded unauthenticated Hello handshake bytes before verifying the HMAC signature
- Affected
- >= 0.29.0, < 0.75.0
- Patched in
- 0.75.0
- mediumCVE-2026-105428Aug 24, 2026[H06] Netstack SOCKS5 proxy binds to all interfaces (0.0.0.0), exposing an unauthenticated proxy into the NetBird overlay
- Affected
- <= 0.74.6
- Patched in
- 0.74.7
- highCVE-2026-115576Jul 29, 2026Local Privilege Escalation via Unauthenticated IPC Socket
- Affected
- >= 0.5.0, < 0.76.0
- Patched in
- 0.76.0
- highGHSA-fhw6-5mff-2gfhJul 15, 2026Relay WebSocket Listener Leaks Goroutines on Unauthenticated Idle Connections, Enabling Resource Exhaustion DoS
- Affected
- < 0.68.0
- Patched in
- 0.68.0
- mediumGHSA-rxmp-8h9v-56cxMar 30, 2026Race Condition on UpdateUser Function Resulting in Privilege Escalation From Admin to Owner
- Affected
- <= 0.65.2
- Patched in
- >= 0.65.3