Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning the super-admin role during account updates. While the code correctly blocks an admin from assigning the admin role to another user, it does not include an equivalent check for the super-admin role. This issue has been patched in version 1.5.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-07 | 2 | Disclosure2 |
| 2026-03-12 | 1 | Disclosure1 |
🟠 Netmaker, Privilege Escalation, #CVE-2026-29195 (Medium) https://dailycve.com/netmaker-privilege-escalation-cve-2026-29195-medium/
Post summary
This is a disclosure of a medium‑severity privilege escalation vulnerability in Netmaker (CVE‑2026‑29195). No proof of concept or exploitation details are provided.
CVE-2026-29195 Privilege Escalation Vulnerability in Netmaker User Update Handler Before 1.5.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29195
Post summary
A privilege escalation vulnerability in Netmaker's user update handler affects versions prior to 1.5.0, and the issue is fixed in the 1.5.0 release.
CVE-2026-29195 Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user fro… https://www.cve.org/CVERecord?id=CVE-2026-29195
Post summary
The post discloses that Netmaker’s user update API (PUT /api/users/{username}) lacks proper validation, potentially allowing privilege escalation, and points to the CVE record for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gravitl | netmaker | - | - | - |