CVE-2026-53602 | forgekeep nebula-mesh up to 0.3.6 Enrollment internal/api/enroll.go caMgr.Sign improper authorization

A vulnerability labeled as very critical has been found in forgekeep nebula-mesh up to 0.3.6. The impacted element is the function caMgr.Sign of the file internal/api/enroll.go of the component Enrollment. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-53602. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More