Executive brief
NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
Affected products
- Go github.com/netbirdio/netbird
Junglewise Threat Intelligence
NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
Severity: low · CVSS 3.1 · Published 2026-04-01
Technologies: github.com/netbirdio/netbird (Go). Vendors: Go.
Related threats
- GO-2026-5646 - NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner in github.com/netbirdio/netbird
- GO-2025-4040 - NetBird VPN does not remove the default password of an admin account in github.com/netbirdio/netbird
- GO-2024-3057 - NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird