CVE-2026-47724 | forgekeep nebula-mesh up to 0.3.3 API Authorization internal/api/hosts.go privileges management

July 23, 2026 Yanac

A vulnerability was found in forgekeep nebula-mesh up to 0.3.3. It has been classified as critical. The impacted element is an unknown function of the file internal/api/hosts.go of the component API Authorization. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-47724. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More