CVE-2026-115325
CVE-2026-115325 · Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to /api/extclients/{network}/{clientid} to replace public keys, disable clients, and obtain WireGuard private keys.
CVSS 8.7 · High · EPSS 0.4%
- Published
- Updated
Affected products and versions
netmaker
- Versions
- ≥ 0, ≤ 1.7.0: Affected (semver)
No fix published
Original sources
- https://github.com/gravitl/netmaker/issues/3875
- https://github.com/gravitl/netmaker/pull/4153
- https://github.com/gravitl/netmaker/commit/332d8b9bab030ee65e78b9141259e4e0e80ac4b0
- https://github.com/gravitl/netmaker/blob/v1.7.0/controllers/ext_client.go#L879
- https://github.com/gravitl/netmaker
- https://www.vulncheck.com/advisories/netmaker-through-1.7.0-authorization-bypass-via-updateextclient-unscoped-lookup
- https://nvd.nist.gov/vuln/detail/CVE-2026-115325