CVE-2026-29195
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning the super-admin role during account updates. While the code correctly blocks an admin from assigning the admin role to another user, it does not include an equivalent check for the super-admin role. This issue has been patched in version 1.5.0.
Vendor
Product
CWE
Yayın Tarihi
2026-03-07 17:15:51
Güncelleme
2026-03-12 13:57:57
Source Identifier
security-advisories@github.com
KEV Date Added
-