QSearchQSearch

CVE-2023-32079

8.8 HIGH

Netmaker makes networks with WireGuard

Published: 2023-08-24 · Last updated: 2026-05-18

Severity and scoring

CVSS
8.8 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-915

Affected products

VendorProduct
netmakernetmaker

Description

Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone using version 0.17.1 can pull the latest docker image of the backend and restart the server.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-38651 — Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0 (8.2 HIGH)
  • CVE-2026-29771 — Netmaker makes networks with WireGuard (6.5 MEDIUM)
  • CVE-2023-32078 — Netmaker makes networks with WireGuard (7.5 HIGH)
  • CVE-2023-32077 — Netmaker makes networks with WireGuard (7.5 HIGH)
  • CVE-2022-36110 — Netmaker makes networks with WireGuard (8.8 HIGH)

Same CWE

  • CVE-2026-46517 — LMDeploy is a toolkit for compressing, deploying, and serving large language models (7.8 HIGH)
  • CVE-2026-46480 — Flowise is a drag & drop user interface to build a customized large language model flow (8.8 HIGH)
  • CVE-2026-46479 — Flowise is a drag & drop user interface to build a customized large language model flow
  • CVE-2026-46478 — Flowise is a drag & drop user interface to build a customized large language model flow
  • CVE-2026-46477 — Flowise is a drag & drop user interface to build a customized large language model flow