github.com/netbirdio/netbird (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/netbirdio/netbird, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-10678: NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by…
• CVE-2024-41260 — CVSS 7.5 (high): A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to…