NetBird CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH NetBird CVE published 2026-10-14

CVE-2026-105429

NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution. The vulnerability exists in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6. A malicious or compromised peer can execute arbitrary commands on other NetBird client hosts by injecting SSH configuration directives. The issue is fixed i [truncated]