CVE-2026-29194

CVE-2026-29194 is a critical authorization bypass vulnerability affecting Netmaker versions prior to 1.5.0. The flaw allows an attacker with a valid host JWT token to bypass subsequent authorization checks, enabling unauthorized access, modification, or deletion of resources belonging to other hosts. This issue has a CVSS score of 8.6 (HIGH), indicating a network-based attack with low complexity and high impact on confidentiality and integrity. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding it. Organizations using affected Netmaker versions should upgrade to 1.5.0 or later to mitigate this risk.