GHSA-rhr9-hgcm-x289High

Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint

Published
March 4, 2026
Last Modified
March 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-29771 →

📋 Description

The /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals.

🎯 Affected products1

  • go/github.com/gravitl/netmaker:< 1.2.0

🔗 References (3)