models

package

Go to main page

Versions in this module

v1

v1.7.0

Aug 31, 2026

Changes in this version

+ const DeviceJoinStatusJoined

+ const DeviceJoinStatusPending

+ const DeviceNetworkStatusApprovalRequired

+ const DeviceNetworkStatusAvailable

+ const DeviceNetworkStatusBlocked

+ const DeviceNetworkStatusJITRequired

+ const DeviceNetworkStatusJoined

+ const DeviceNetworkStatusPending

+ const PostureStatusFail

+ const PostureStatusPass

+ const PostureStatusWarn

type ApiHost

+ EntraDeviceID string

+ HardwareUUID string

+ SerialNumber string

+ TcpProxyCertFingerprint string

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

type ApiNode

+ SelectedInternetEgressID string

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

+ TenantID string

+ UseTcpUplink bool

type CommonNode

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

+ TenantID string

+ UseTcpUplink bool

type CreateGwReq

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

type CustomExtClient

+ SelectedInternetEgressID string

+ UseInternetEgress *bool

+ type DeviceExitNode struct

+ Description string

+ EgressID string

+ Name string

+ Network string

+ RoutingHostName string

+ RoutingNodeID string

+ Selected bool

+ Status bool

+ TcpProxyEnabled bool

+ TcpProxyListenPort int

+ type DeviceExitNodeSelectionReq struct

+ EgressID string

+ UseTcpUplink bool

+ type DeviceJoinResult struct

+ Status string

+ type DeviceNetwork struct

+ ApprovalRequestedAt *int64

+ ApprovalRequired bool

+ Connected bool

+ DisplayName string

+ HasJITAccess bool

+ JITAppliesToUser bool

+ JITEnabled bool

+ JITExpiresAt *int64

+ JITGrant any

+ JITPendingRequest bool

+ JITRequest any

+ Joined bool

+ NetworkID string

+ Pending bool

+ Status string

type EgressReq

+ Type schema.EgressType

type EnrollmentKey

+ SkipDeviceApproval bool

type EnrollmentToken

+ TenantID string

type Event

+ TenantID string

type Host

+ EntraDeviceID string

+ HardwareUUID string

+ OwnerUsername string

+ SerialNumber string

+ TcpProxyCertFingerprint string

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

+ type HostEDRStatus struct

+ AgentHealthy bool

+ AgentInstalled bool

+ LastError string

+ LastSeenAt time.Time

+ LastSyncedAt time.Time

+ MatchedBy string

+ Provider string

+ RiskLevel string

+ type HostMDMStatus struct

+ Compliant bool

+ Enrolled bool

+ LastSyncedAt time.Time

+ MatchedBy string

+ Provider string

type HostNetworkInfo

+ TcpProxyCertFingerprint string

+ TcpProxyEnabled bool

+ TcpProxyListenAddr string

+ TcpProxyListenPort int

+ TcpProxyPublicHostname string

+ TcpProxyTLSMode string

type HostPeerUpdate

+ DefaultGwIp6 net.IP

+ type HostPostureStatus struct

+ EDR *HostEDRStatus

+ EvaluatedAt time.Time

+ HostID string

+ MDM *HostMDMStatus

+ Networks []NetworkPostureStatus

type HostPull

+ DefaultGwIp6 net.IP

type IDandAddr

+ TcpProxyCertFingerprint string

+ TcpProxyEndpoint string

+ type LoginMethodRequest struct

+ Username string

+ type LoginMethodsAvailable struct

+ BasicAuth bool

+ OrgAuth bool

+ OrganizationID string

+ SSO bool

+ SSOProvider string

+ type LoginMethodsResponse struct

+ Options []LoginOption

+ type LoginOption struct

+ Methods LoginMethodsAvailable

+ Scope scope.Scope

+ ScopeID string

+ ScopeMetadata string

+ ScopeName string

+ ScopeSlug string

+ type NetworkPostureStatus struct

+ NetworkID string

+ NodeID string

+ Severity schema.Severity

+ Status string

+ Violations []Violation

type Node

+ SelectedInternetEgressID string

+ func ConvertToStaticNode(ext ExtClient) Node

+ type NodeExitNodeSelectionReq struct

+ EgressID string

+ UseTcpUplink bool

type NodeWithHost

+ SelectedInternetEgressID string

+ TenantID string

type PostureCheckDeviceInfo

+ EDRState *schema.DeviceEDRState

+ HostID string

+ MDMState *schema.DeviceMDMState

type ReturnUser

+ EmailValidated bool

type ServerConfig

+ TenantID string

type TokenType

+ var PreAuthTokenType TokenType = "pre_auth_token"

+ type TransferOrgOwnerRequest struct

+ Username string

type UserClaims

+ Scope scope.Scope

+ ScopeID string

v1.6.0

Jun 12, 2026

Changes in this version

+ const DNSEntryType_Custom

+ const DNSEntryType_Node

type APIEnrollmentKey

+ Default bool

type DNSEntry

+ Type DNSEntryType

+ type DNSEntryType string

type EgressDomain

+ ResolvedIPs []string

+ type EgressPresetApp struct

+ Description string

+ Domains []string

+ Group string

+ ID string

+ Name string

+ Routes []string

+ Sources []string

+ SuggestedDomain string

type EgressReq

+ Domains []string

+ PresetID string

type ExtClient

+ Status schema.NodeStatus

type FeatureFlags

+ EnableSIEMIntegration bool

type HostMqAction

+ const CollectMetrics

type JITOperationRequest

+ UserGroupIDs []string

type Node

+ LastEvaluationCycleID string

+ PostureCheckViolationSeverityLevel schema.Severity

+ type NodeWithHost struct

+ Action string

+ Address string

+ Address6 string

+ AutoAssignGateway bool

+ AutoRelayedPeers datatypes.JSONType[map[string]string]

+ Connected bool

+ CreatedAt time.Time

+ ExpirationDateTime time.Time

+ Host *ApiHost

+ HostID string

+ ID string

+ IsAutoRelay bool

+ IsGateway bool

+ IsIGWClient bool

+ IsInternetGateway bool

+ LastCheckIn time.Time

+ Metadata string

+ NetworkID string

+ PendingDelete bool

+ PostureCheckLastEvaluationCycleID string

+ PostureCheckSeverity schema.Severity

+ RelayedByNodeID *string

+ RelayedClients datatypes.JSONMap

+ RelayedIGWClients datatypes.JSONMap

+ Status schema.NodeStatus

+ Tags datatypes.JSONMap

+ UpdatedAt time.Time

+ func (n *NodeWithHost) Fill(_node *schema.Node)

+ type OnboardingStatus struct

+ NetworkCount int

+ ShowOnboarding bool

type UserJITNetworkStatus

+ JitAppliesToUser bool

v1.5.1

Mar 31, 2026

Changes in this version

type AclPolicyTag

+ Name string

type ApiHost

+ func NewApiHostFromSchemaHost(h *schema.Host) *ApiHost

+ type BulkDeleteError struct

+ Error string

+ ID string

+ type BulkDeleteRequest struct

+ IDs []string

+ type BulkDeleteResponse struct

+ Deleted []string

+ Failed []BulkDeleteError

+ type BulkExtClientStatusUpdate struct

+ Enabled bool

+ IDs []string

+ type BulkNodeStatusUpdate struct

+ Connected bool

+ IDs []string

+ type BulkStatusResponse struct

+ Failed []BulkDeleteError

+ Updated []string

+ type BulkUserStatusUpdate struct

+ Disable bool

+ IDs []string

type Nameserver

+ IsADDomain bool

type Network

+ CreatedAt time.Time

+ CreatedBy string

+ type PaginatedResponse struct

+ Data interface{}

+ Page int

+ PerPage int

+ Total int

+ TotalPages int

type PostureCheckDeviceInfo

+ SkipAutoUpdate bool

type ReturnUser

+ CreatedAt time.Time

+ CreatedBy string

+ UpdatedAt time.Time

type User

+ CreatedAt time.Time

+ CreatedBy string

+ UpdatedAt time.Time

+ type UserEventLog struct

+ UserGroupsWithNames map[string]string

type UserRemoteGws

+ Nameservers []Nameserver

v1.5.0

Feb 11, 2026

Changes in this version

+ type EgressNATMode string

+ const DirectNAT

+ const VirtualNAT

type EgressRangeMetric

+ EgressName string

+ Mode EgressNATMode

+ VirtualNetwork string

type EgressReq

+ Mode EgressNATMode

type ExtClient

+ JITExpiresAt *time.Time

type FeatureFlags

+ EnableJIT bool

+ EnableOverlappingEgressRanges bool

+ type JITAccessRequest struct

+ NetworkID string

+ Reason string

+ type JITOperationRequest struct

+ Action string

+ ExpiresAt int64

+ GrantID string

+ Reason string

+ RequestID string

type Network

+ JITEnabled string

+ VirtualNATPoolIPv4 string

+ VirtualNATSitePrefixLenIPv4 int

+ func (network *Network) AssignVirtualNATDefaults(vpnCIDR string, networkID string)

type PeerIdentity

+ Name string

type RsrcID

+ const AllJitAdminRsrcID

+ const AllJitUserRsrcID

+ const AllTrafficFlowRsrcID

+ const AllUserActivityRsrcID

type RsrcType

+ const JitAdminRsrc

+ const JitUserRsrc

+ const TrafficFlow

+ const UserActivityRsrc

type ServerConfig

+ IPDetectionInterval int

type ServerSettings

+ IPDetectionInterval int

+ type UserJITNetworkStatus struct

+ Grant any

+ HasAccess bool

+ JITEnabled bool

+ NetworkID string

+ NetworkName string

+ PendingRequest bool

+ Request any

v1.4.0

Dec 22, 2025 GO-2026-4651 +3 more

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type Action

+ const DisableFlowLogs

+ const EnableFlowLogs

+ const GatewayAssign

+ const GatewayUnAssign

type ApiHost

+ CountryCode string

+ EnableFlowLogs bool

+ KernelVersion string

+ OSFamily string

+ OSVersion string

type ApiNode

+ Country string

+ LastEvaluatedAt time.Time

+ PostureCheckVolationSeverityLevel Severity

+ PostureChecksViolations []Violation

type CustomExtClient

+ ClientVersion string

+ KernelVersion string

+ OS string

+ OSFamily string

+ OSVersion string

type EgressRangeMetric

+ EgressID string

type ErrorResponse

+ Response interface{}

+ type ExporterFeatureFlags struct

+ EnableFlowLogs bool

type ExtClient

+ ClientVersion string

+ KernelVersion string

+ LastEvaluatedAt time.Time

+ OS string

+ OSFamily string

+ OSVersion string

+ PostureCheckVolationSeverityLevel Severity

+ PostureChecksViolations []Violation

type FeatureFlags

+ EnableFlowLogs bool

+ EnablePostureChecks bool

+ type HookCommand struct

+ Command HookCommandType

+ ID string

+ Interval time.Duration

+ type HookCommandType int

+ const HookCommandReset

+ const HookCommandRestart

+ const HookCommandStop

type HookDetails

+ ID string

+ Params []interface{}

+ type HookFunc func(...interface{}) error

type Host

+ CountryCode string

+ EnableFlowLogs bool

+ KernelVersion string

+ OSFamily string

+ OSVersion string

type HostPeerUpdate

+ AddressIdentityMap map[string]PeerIdentity

type HostPull

+ AddressIdentityMap map[string]PeerIdentity

type IDandAddr

+ Address4 string

+ Address6 string

+ UserName string

type Nameserver

+ IsFallback bool

type Network

+ AutoRemove string

+ AutoRemoveTags []string

+ AutoRemoveThreshold int

type Node

+ CountryCode string

+ LastEvaluatedAt time.Time

+ Location string

+ PostureCheckVolationSeverityLevel Severity

+ PostureChecksViolations []Violation

+ type PeerIdentity struct

+ ID string

+ Type PeerType

+ type PeerType int

+ const PeerType_EgressRoute

+ const PeerType_Node

+ const PeerType_User

+ const PeerType_WireGuard

+ type PostureCheckDeviceInfo struct

+ AutoUpdate bool

+ ClientLocation string

+ ClientVersion string

+ IsUser bool

+ KernelVersion string

+ OS string

+ OSFamily string

+ OSVersion string

+ Tags map[TagID]struct{}

+ UserGroups map[UserGroupID]struct{}

type RsrcID

+ const AllNameserverRsrcID

+ const AllPostureCheckRsrcID

type RsrcType

+ const NameserverRsrc

+ const PostureCheckRsrc

type ServerConfig

+ GRPC string

type ServerSettings

+ CleanUpInterval int

+ EnableFlowLogs bool

+ PostureCheckInterval string

+ type Severity int

+ const SeverityCritical

+ const SeverityHigh

+ const SeverityLow

+ const SeverityMedium

+ const SeverityUnknown

type SubjectType

+ const PostureCheckSub

+ type UserIPMap struct

+ Mappings map[string]UserMapping

+ type UserMapping struct

+ Groups []string

+ User string

+ type Violation struct

+ Attribute string

+ CheckID string

+ Message string

+ Name string

+ Severity Severity

v1.2.0

Nov 7, 2025 GO-2026-4651 +3 more

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type APIEnrollmentKey

+ AutoAssignGateway bool

type ApiNode

+ AutoAssignGateway bool

+ AutoRelayedPeers map[string]string

+ IsAutoRelay bool

+ type AutoRelayMeReq struct

+ AutoRelayGwID string

+ NodeID string

type CommonNode

+ AutoAssignGateway bool

type EnrollmentKey

+ AutoAssignGateway bool

type FeatureFlags

+ EnableDeviceApproval bool

+ EnableEgressHA bool

+ EnableGwsHA bool

type HostMqAction

+ const CheckAutoAssignGw

+ const UpdateNode

type HostPeerUpdate

+ AutoRelayNodes map[NetworkID][]Node

+ GwNodes map[NetworkID][]Node

+ Nodes []Node

type HostPull

+ AutoRelayNodes map[NetworkID][]Node

+ GwNodes map[NetworkID][]Node

+ ReplacePeers bool

type Metrics

+ UpdatedAt time.Time

type Nameserver

+ IsSearchDomain bool

+ type NetworkUsage struct

+ Clients int

+ Egresses int

+ FailOvers int

+ Ingresses int

+ InternetGateways int

+ Nodes int

+ Relays int

type Node

+ AutoRelayedPeers map[string]string

+ IsAutoRelay bool

type ServerConfig

+ OldAClsSupport bool

+ PeerConnectionCheckInterval string

type ServerSettings

+ OldAClsSupport bool

+ PeerConnectionCheckInterval string

type Signal

+ AutoRelayNodeMetrics map[string]int64

+ NetworkID string

+ type Usage struct

+ Clients int

+ Egresses int

+ FailOvers int

+ Hosts int

+ Ingresses int

+ InternetGateways int

+ NetworkUsage map[string]NetworkUsage

+ Networks int

+ Relays int

+ Servers int

+ Users int

+ func (l *Usage) SetDefaults()

type UserRemoteGws

+ ManageDNS bool

+ SearchDomains []string

type UserRoleID

+ const Auditor

v1.1.0

Sep 11, 2025 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type Action

+ const DisableBasicAuth

+ const DisableMFA

+ const DisableTelemetry

+ const EnableBasicAuth

+ const EnableMFA

+ const EnableTelemetry

+ const EnforceMFA

+ const UnenforceMFA

+ const UpdateAuthenticationSecuritySettings

+ const UpdateClientSettings

+ const UpdateIDPSettings

+ const UpdateMonitoringAndDebuggingSettings

+ const UpdateSMTPSettings

type CustomExtClient

+ DeviceID string

+ type EgressDomain struct

+ Domain string

+ Host Host

+ ID string

+ Node Node

type EgressReq

+ Domain string

type ExtClient

+ DeviceID string

+ type FeatureFlags struct

+ AllowMultiServerLicense bool

+ EnableIDPIntegration bool

+ EnableNetworkActivity bool

+ EnableOAuth bool

type HostMqAction

+ const EgressUpdate

type HostPeerUpdate

+ DnsNameservers []Nameserver

+ EgressWithDomains []EgressDomain

type HostPull

+ DnsNameservers []Nameserver

+ EgressWithDomains []EgressDomain

+ NameServers []string

type HostUpdate

+ EgressDomain EgressDomain

+ type IDPSyncStatus struct

+ Description string

+ Status string

+ type IDPSyncTestRequest struct

+ AuthProvider string

+ AzureTenantID string

+ ClientID string

+ ClientSecret string

+ GoogleAdminEmail string

+ GoogleSACredsJson string

+ OktaAPIToken string

+ OktaOrgURL string

+ type Nameserver struct

+ IPs []string

+ MatchDomain string

+ type NameserverReq struct

+ Description string

+ MatchDomain string

+ Name string

+ Network string

+ Servers []string

+ Status bool

+ Tags []string

type Network

+ AutoJoin string

type ServerSettings

+ JwtValidityDurationClients int

+ OktaAPIToken string

+ OktaOrgURL string

type SsoState

+ AppName string

type SubjectType

+ const NameserverSub

type UserGroup

+ ColorCode string

+ type UserIdentityValidationRequest struct

+ Password string

+ type UserIdentityValidationResponse struct

+ IdentityValidated bool

type UserRemoteGws

+ MatchDomains []string

+ type UserSettings struct

+ ReducedMotion bool

+ TextSize string

+ Theme Theme

v1.0.0

Jun 26, 2025 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type ApiHost

+ Location string

type ApiNode

+ Location string

type CustomExtClient

+ Location string

type ExtClient

+ Location string

type Host

+ Location string

+ type PartialUserLoginResponse struct

+ PreAuthToken string

+ UserName string

type ReturnUser

+ IsMFAEnabled bool

+ NumAccessTokens int

type ServerSettings

+ MFAEnforced bool

+ type TOTPInitiateResponse struct

+ OTPAuthURL string

+ OTPAuthURLSignature string

+ QRCode string

type User

+ IsMFAEnabled bool

+ TOTPSecret string

+ type UserTOTPVerificationParams struct

+ OTPAuthURL string

+ OTPAuthURLSignature string

+ TOTP string

v0

v0.99.0

Jun 6, 2025 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type APIEnrollmentKey

+ AutoEgress bool

type AclGroupType

+ const EgressID

+ type Action string

+ const Connect

+ const Create

+ const Delete

+ const DeleteAll

+ const JoinHostToNet

+ const LogOut

+ const Login

+ const RefreshAllKeys

+ const RefreshKey

+ const RemoveHostFromNet

+ const Sync

+ const SyncAll

+ const Update

+ const UpgradeAll

type ApiHost

+ DNS string

type ApiNode

+ IsGw bool

+ type Diff struct

+ New interface{}

+ Old interface{}

+ type EgressDetails struct

+ EgressGatewayNatEnabled bool

+ EgressGatewayRanges []string

+ EgressGatewayRequest EgressGatewayRequest

+ IsEgressGateway bool

type EgressRangeMetric

+ Nat bool

+ type EgressReq struct

+ Description string

+ ID string

+ IsInetGw bool

+ Name string

+ Nat bool

+ Network string

+ Nodes map[string]int

+ Range string

+ Status bool

+ Tags []string

type EnrollmentKey

+ AutoEgress bool

+ type Event struct

+ Action Action

+ Diff Diff

+ NetworkID NetworkID

+ Origin Origin

+ Source Subject

+ Target Subject

+ TriggeredBy string

type Host

+ DNS string

type Node

+ EgressDetails EgressDetails

+ type Origin string

+ const Api

+ const ClientApp

+ const Dashboard

+ const NMCTL

type ReturnUser

+ AccountDisabled bool

+ DisplayName string

+ ExternalIdentityProviderID string

type RsrcType

+ const GatewayRsrc

type ServerConfig

+ APIHost string

+ type ServerSettings struct

+ AllowedEmailDomains string

+ AuditLogsRetentionPeriodInDays int

+ AuthProvider string

+ AzureTenant string

+ BasicAuth bool

+ ClientID string

+ ClientSecret string

+ DefaultDomain string

+ EmailSenderAddr string

+ EmailSenderPassword string

+ EmailSenderUser string

+ EndpointDetection bool

+ GoogleAdminEmail string

+ GoogleSACredsJson string

+ GroupFilters []string

+ IDPSyncInterval string

+ JwtValidityDuration int

+ ManageDNS bool

+ MetricInterval string

+ MetricsPort int

+ NetclientAutoUpdate bool

+ OIDCIssuer string

+ RacAutoDisable bool

+ RacRestrictToSingleNetwork bool

+ ReducedMotion bool

+ SmtpHost string

+ SmtpPort int

+ Stun bool

+ StunServers string

+ SyncEnabled bool

+ Telemetry string

+ TextSize string

+ Theme Theme

+ UserFilters []string

+ Verbosity int32

+ type Subject struct

+ ID string

+ Info interface{}

+ Name string

+ Type SubjectType

+ type SubjectType string

+ const AclSub

+ const ClientAppSub

+ const DashboardSub

+ const DeviceSub

+ const EgressSub

+ const EnrollmentKeySub

+ const GatewaySub

+ const NetworkSub

+ const NodeSub

+ const PendingUserSub

+ const SettingSub

+ const TagSub

+ const UserAccessTokenSub

+ const UserGroupSub

+ const UserInviteSub

+ const UserRoleSub

+ const UserSub

+ func (sub SubjectType) String() string

+ type Theme string

+ const Dark

+ const Light

+ const System

+ type TokenType string

+ var AccessTokenType TokenType = "access_token"

+ var UserIDTokenType TokenType = "user_id_token"

+ func (t TokenType) String() string

type User

+ AccountDisabled bool

+ DisplayName string

+ type UserAccessToken struct

+ CreatedAt time.Time

+ CreatedBy string

+ ExpiresAt time.Time

+ ID string

+ LastUsed time.Time

+ Name string

+ UserName string

+ func (a *UserAccessToken) Create() error

+ func (a *UserAccessToken) Delete() error

+ func (a *UserAccessToken) DeleteAllUserTokens() error

+ func (a *UserAccessToken) Get() error

+ func (a *UserAccessToken) List() (ats []UserAccessToken, err error)

+ func (a *UserAccessToken) ListByUser() (ats []UserAccessToken)

+ func (a *UserAccessToken) Table() string

+ func (a *UserAccessToken) Update() error

type UserClaims

+ Api string

+ TokenType TokenType

type UserGroup

+ ExternalIdentityProviderID string

v0.90.0

Mar 25, 2025 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ const GwTagName

+ const OldRemoteAccessTagName

+ const SSH

type AclGroupType

+ const EgressRange

+ const NodeID

+ const NodeTagID

type AclRule

+ Dst []net.IPNet

+ Dst6 []net.IPNet

type ApiNode

+ EgressGatewayRangesWithMetric []EgressRangeMetric

+ type ApiNodeStatus struct

+ ID string

+ IsStatic bool

+ IsUserNode bool

+ Status NodeStatus

type CommonNode

+ IsGw bool

+ type CreateGwReq struct

type CreateTagReq

+ ColorCode string

+ type DeleteGw struct

type EgressGatewayRequest

+ RangesWithMetric []EgressRangeMetric

type EgressInfo

+ EgressFwRules map[string]AclRule

type EgressNetworkRoutes

+ EgressRangesWithMetric []EgressRangeMetric

+ Network string

+ PeerKey string

+ type EgressRangeMetric struct

+ Network string

+ RouteMetric uint32

type ExtClient

+ Mutex *sync.Mutex

type HostMqAction

+ const ForceUpgrade

type HostNetworkInfo

+ Version string

+ type HostPeerInfo struct

+ NetworkPeerIDs map[NetworkID]PeerMap

type HostPeerUpdate

+ NameServers []string

type Network

+ NameServers []string

type Node

+ Mutex *sync.Mutex

+ func (nm *Node) ConvertToStatusNode() *ApiNodeStatus

type NodeStatus

+ const Disconnected

+ type OldPeerUpdateFields struct

+ EndpointDetection bool

+ NodePeers []wgtypes.PeerConfig

+ OldPeers []wgtypes.PeerConfig

type ReturnUserWithRolesAndGroups

+ UserGroups map[UserGroupID]UserGroup

type ServerConfig

+ EndpointDetection bool

+ MetricsPort int

type Tag

+ ColorCode string

type UpdateTagReq

+ ColorCode string

type UserRemoteGws

+ Addresses string

+ DnsAddress string

+ Status NodeStatus

v0.30.0

Dec 17, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ const AllTCP

+ const AllUDP

+ const Any

+ const Custom

+ const Http

+ const Https

+ const ICMPService

+ const LastCheckInThreshold

type Acl

+ Port []string

+ Proto Protocol

+ ServiceType string

type AclPolicyTypes

+ ProtocolTypes []ProtocolType

+ type AclRule struct

+ Allowed bool

+ AllowedPorts []string

+ AllowedProtocol Protocol

+ Direction AllowedTrafficDirection

+ ID string

+ IP6List []net.IPNet

+ IPList []net.IPNet

type ApiNode

+ Status NodeStatus

type CustomExtClient

+ Country string

+ DeviceName string

+ IsAlreadyConnectedToInetGw bool

+ Os string

+ PublicEndpoint string

type ExtClient

+ Country string

+ DeviceName string

+ Os string

+ PublicEndpoint string

type FwRule

+ AllowedPorts []string

+ AllowedProtocol Protocol

type FwUpdate

+ AclRules map[string]AclRule

+ AllowAll bool

+ AllowedNetworks []net.IPNet

type HostPeerUpdate

+ Stun bool

+ StunServers string

type Node

+ Status NodeStatus

+ func (node *Node) AddressIPNet4() net.IPNet

+ func (node *Node) AddressIPNet6() net.IPNet

+ type NodeStatus string

+ const ErrorSt

+ const OfflineSt

+ const OnlineSt

+ const UnKnown

+ const WarningSt

+ type Protocol string

+ const ALL

+ const ICMP

+ const TCP

+ const UDP

+ func (p Protocol) String() string

+ type ProtocolType struct

+ AllowPortSetting bool

+ AllowedProtocols []Protocol

+ Name string

+ PortRange string

type RsrcID

+ const AllTagsRsrcID

type ServerConfig

+ Stun bool

+ StunServers string

+ type ServiceType string

v0.26.0

Nov 8, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ const RemoteAccessTagName

type APIEnrollmentKey

+ Groups []TagID

+ type Acl struct

+ AllowedDirection AllowedTrafficDirection

+ CreatedAt time.Time

+ CreatedBy string

+ Default bool

+ Dst []AclPolicyTag

+ Enabled bool

+ ID string

+ MetaData string

+ Name string

+ NetworkID NetworkID

+ RuleType AclPolicyType

+ Src []AclPolicyTag

+ type AclGroupType string

+ const DeviceAclID

+ const NetmakerIPAclID

+ const NetmakerSubNetRangeAClID

+ const UserAclID

+ const UserGroupAclID

+ func (g AclGroupType) String() string

+ type AclPolicy struct

+ PrefixTagUser AclGroupType

+ TypeID AclPolicyType

+ type AclPolicyTag struct

+ ID AclGroupType

+ Value string

+ type AclPolicyType string

+ const DevicePolicy

+ const UserPolicy

+ type AclPolicyTypes struct

+ DstGroupTypes []AclGroupType

+ RuleTypes []AclPolicyType

+ SrcGroupTypes []AclGroupType

+ type AllowedTrafficDirection int

+ const TrafficDirectionBi

+ const TrafficDirectionUni

type ApiNode

+ IngressMTU int32

+ IngressPersistentKeepalive int32

+ IsStatic bool

+ IsUserNode bool

+ StaticNode ExtClient

+ Tags map[TagID]struct{}

+ type CreateTagReq struct

+ Network NetworkID

+ TagName string

+ TaggedNodes []ApiNode

type CustomExtClient

+ Tags map[TagID]struct{}

type EnrollmentKey

+ Default bool

+ Groups []TagID

type ExtClient

+ Tags map[TagID]struct{}

+ func (ext *ExtClient) ConvertToStaticNode() Node

+ type FwRule struct

+ Allow bool

+ DstIP net.IPNet

+ SrcIP net.IPNet

type FwUpdate

+ IngressInfo map[string]IngressInfo

+ IsIngressGw bool

type HostPeerUpdate

+ ManageDNS bool

type IngressInfo

+ AllowAll bool

+ EgressRanges6 []net.IPNet

+ IngressID string

+ Network net.IPNet

+ Network6 net.IPNet

+ Rules []FwRule

+ StaticNodeIps []net.IP

type IngressRequest

+ MTU int32

+ PersistentKeepalive int32

type Metric

+ LastTotalReceived int64

+ LastTotalSent int64

+ type NetworkStatResp struct

+ Hosts int

type Node

+ IngressMTU int32

+ IngressPersistentKeepalive int32

+ IsStatic bool

+ IsUserNode bool

+ StaticNode ExtClient

+ Tags map[TagID]struct{}

type RsrcType

+ const TagRsrc

type ServerConfig

+ DefaultDomain string

+ ManageDNS bool

+ type Tag struct

+ CreatedAt time.Time

+ CreatedBy string

+ ID TagID

+ Network NetworkID

+ TagName string

+ func (t Tag) GetIDFromName() string

+ type TagID string

+ func (id TagID) String() string

+ type TagListResp struct

+ TaggedNodes []ApiNode

+ UsedByCnt int

+ type TagListRespNodes struct

+ TaggedNodes []ApiNode

+ UsedByCnt int

+ type UpdateAclRequest struct

+ NewName string

+ type UpdateTagReq struct

+ NewName string

+ TaggedNodes []ApiNode

type User

+ ExternalIdentityProviderID string

type UserClaims

+ RacAutoDisable bool

type UserGroup

+ Default bool

+ Name string

+ type UserRAGs struct

+ Connected bool

+ GWName string

+ GwID string

+ IsInternetGateway bool

+ Metadata string

+ Network string

type UserRolePermissionTemplate

+ MetaData string

+ Name string

v0.25.0

Aug 28, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ var RsrcTypeMap = map[RsrcType]struct

+ func GetRAGRoleName(netID, hostName string) string

+ type AuthType string

+ var BasicAuth AuthType = "basic_auth"

+ var OAuth AuthType = "oauth"

+ type CreateGroupReq struct

+ Group UserGroup

+ Members []string

+ type InviteUsersReq struct

+ NetworkRoles map[NetworkID]map[UserRoleID]struct{}

+ PlatformRoleID string

+ UserEmails []string

+ UserGroups map[UserGroupID]struct{}

+ type NetworkID string

+ const AllNetworks

+ func (n NetworkID) String() string

type ReturnUser

+ AuthType AuthType

+ NetworkRoles map[NetworkID]map[UserRoleID]struct{}

+ PlatformRoleID UserRoleID

+ UserGroups map[UserGroupID]struct{}

+ type ReturnUserWithRolesAndGroups struct

+ PlatformRole UserRolePermissionTemplate

+ type RsrcID string

+ const AllAclsRsrcID

+ const AllDnsRsrcID

+ const AllEgressGwRsrcID

+ const AllEnrollmentKeysRsrcID

+ const AllExtClientsRsrcID

+ const AllFailOverRsrcID

+ const AllHostRsrcID

+ const AllInetGwRsrcID

+ const AllNetworkRsrcID

+ const AllRelayRsrcID

+ const AllRemoteAccessGwRsrcID

+ const AllUserRsrcID

+ func (rid RsrcID) String() string

+ type RsrcPermissionScope struct

+ Create bool

+ Delete bool

+ Read bool

+ SelfOnly bool

+ Update bool

+ VPNaccess bool

+ type RsrcType string

+ const AclRsrc

+ const DnsRsrc

+ const EgressGwRsrc

+ const EnrollmentKeysRsrc

+ const ExtClientsRsrc

+ const FailOverRsrc

+ const HostRsrc

+ const InetGwRsrc

+ const MetricRsrc

+ const NetworkRsrc

+ const RelayRsrc

+ const RemoteAccessGwRsrc

+ const UserRsrc

+ func (r RsrcType) String() string

+ type RsrcURLInfo struct

+ Method string

+ Path string

type User

+ AuthType AuthType

+ NetworkRoles map[NetworkID]map[UserRoleID]struct{}

+ PlatformRoleID UserRoleID

+ UserGroups map[UserGroupID]struct{}

type UserClaims

+ Role UserRoleID

+ type UserGroup struct

+ ID UserGroupID

+ MetaData string

+ NetworkRoles map[NetworkID]map[UserRoleID]struct{}

+ type UserGroupID string

+ func (g UserGroupID) String() string

+ type UserInvite struct

+ Email string

+ InviteCode string

+ InviteURL string

+ NetworkRoles map[NetworkID]map[UserRoleID]struct{}

+ PlatformRoleID string

+ UserGroups map[UserGroupID]struct{}

+ type UserRoleID string

+ const AdminRole

+ const NetworkAdmin

+ const NetworkUser

+ const PlatformUser

+ const ServiceUser

+ const SuperAdminRole

+ func GetRAGRoleID(netID, hostID string) UserRoleID

+ func (r UserRoleID) String() string

+ type UserRolePermissionTemplate struct

+ Default bool

+ DenyDashboardAccess bool

+ FullAccess bool

+ GlobalLevelAccess map[RsrcType]map[RsrcID]RsrcPermissionScope

+ ID UserRoleID

+ NetworkID NetworkID

+ NetworkLevelAccess map[RsrcType]map[RsrcID]RsrcPermissionScope

+ UiName string

v0.24.3

Jul 18, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type HostMqAction

+ const SignalPull

type ServerConfig

+ MetricInterval string

v0.24.2

Jun 13, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type ApiHost

+ IsStaticPort bool

type Host

+ IsStaticPort bool

type HostNetworkInfo

+ IsStaticPort bool

type IngressRequest

+ Metadata string

type UserRemoteGws

+ NetworkAddresses []string

v0.24.1

May 14, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type ApiNode

+ AdditionalRagIps []string

type EgressInfo

+ EgressGwAddr6 net.IPNet

+ Network6 net.IPNet

type EgressNetworkRoutes

+ EgressGwAddr net.IPNet

+ EgressGwAddr6 net.IPNet

+ type GetClientConfReqDto struct

+ PreferredIp string

type Node

+ AdditionalRagIps []net.IP

type UserRemoteGws

+ AllowedEndpoints []string

+ GwListenPort int

v0.24.0

Apr 17, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type ApiHost

+ EndpointIPv6 string

+ type ApiIface struct

+ AddressString string

+ Name string

type EgressNetworkRoutes

+ NodeAddr6 net.IPNet

type Host

+ EndpointIPv6 net.IP

type HostPull

+ EndpointDetection bool

v0.23.0

Feb 28, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type ApiNode

+ InetNodeReq InetNodeReq

+ InternetGwID string

+ Metadata string

type CustomExtClient

+ PostDown string

+ PostUp string

+ type DefaultGwInfo struct

type ExtClient

+ PostDown string

+ PostUp string

type HostPeerUpdate

+ ChangeDefaultGw bool

+ DefaultGwIp net.IP

+ IsInternetGw bool

type HostPull

+ ChangeDefaultGw bool

+ DefaultGwIp net.IP

+ IsInternetGw bool

+ type InetNodeReq struct

+ InetNodeClientIDs []string

type Node

+ InetNodeReq InetNodeReq

+ InternetGwID string

+ IsInternetGateway bool

+ Metadata string

type UserRemoteGws

+ Metadata string

v0.22.0

Jan 16, 2024 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ const ResHeaderKeyStAccessToken

+ var ErrInvalidEnrollmentKey = errors.New("enrollment key is not valid")

+ var ErrInvalidEnrollmentKeyValue = errors.New("enrollment key value is not valid")

+ var ErrNilEnrollmentKey = errors.New("enrollment key is nil")

+ var ErrNilNetworksEnrollmentKey = errors.New("enrollment key networks is nil")

+ var ErrNilTagsEnrollmentKey = errors.New("enrollment key tags is nil")

type ApiNode

+ FailOverPeers map[string]struct{}

+ FailedOverBy uuid.UUID

+ IsFailOver bool

+ IsInternetGateway bool

type CommonNode

+ IsInternetGateway bool

type ExtClient

+ AllowedIPs []string

+ func (extPeer *ExtClient) AddressIPNet4() net.IPNet

+ func (extPeer *ExtClient) AddressIPNet6() net.IPNet

+ type FailOverMeReq struct

+ NodeID string

+ type FormField struct

+ Id string

+ Value any

+ type FormFields []FormField

type HostMqAction

+ const UpdateMetrics

type HostPeerUpdate

+ ReplacePeers bool

type HostPull

+ EgressRoutes []EgressNetworkRoutes

+ FwUpdate FwUpdate

type HostUpdate

+ NewMetrics Metrics

type IDandAddr

+ HostID string

type IngressRequest

+ IsInternetGateway bool

+ type LoginReqDto struct

+ Email string

+ TenantID string

type Node

+ FailOverPeers map[string]struct{}

+ FailedOverBy uuid.UUID

+ IsFailOver bool

type ServerConfig

+ BrokerType string

+ type SignInReqDto struct

+ FormFields FormFields

+ type SignInResDto struct

+ Status string

+ User User

type Signal

+ FromHostID string

+ FromNodeID string

+ IsPro bool

+ ToHostID string

+ ToNodeID string

type SignalAction

+ const RelayME

+ type SsoLoginData struct

+ AmbAccessToken string

+ Expiration time.Time

+ OauthCode string

+ OauthProvider string

+ Username string

+ type SsoLoginReqDto struct

+ OauthProvider string

+ type SsoLoginResDto struct

+ AuthToken string

+ User string

+ type TenantLoginResDto struct

+ Code int

+ Message string

+ Response struct{ ... }

type UserRemoteGws

+ GwPeerPublicKey string

+ IsInternetGateway bool

v0.21.2

Nov 17, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

type APIEnrollmentKey

+ Relay string

type ApiHost

+ AutoUpdate bool

type EnrollmentKey

+ Relay uuid.UUID

type HostPull

+ HostNetworkInfo HostInfoMap

type Network

+ func (network *Network) GetNetworkNetworkCIDR4() *net.IPNet

+ func (network *Network) GetNetworkNetworkCIDR6() *net.IPNet

type RegisterMsg

+ Relay string

v0.21.1

Oct 16, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

Changes in this version

+ const DNSDeleteByIP

+ const DNSDeleteByName

+ const DNSInsert

+ const DNSReplaceIP

+ const DNSReplaceName

+ const DefaultExpDuration

+ const DefaultPersistentKeepAlive

+ const EnrollmentKeyLength

+ const FIREWALL_IPTABLES

+ const FIREWALL_NFTABLES

+ const FIREWALL_NONE

+ const MAX_NAME_LENGTH

+ const NODE_DELETE

+ const NODE_FORCE_UPDATE

+ const NODE_IS_PENDING

+ const NODE_NOOP

+ const NODE_SERVER_NAME

+ const PLACEHOLDER_KEY_TEXT

+ const PLACEHOLDER_TOKEN_TEXT

+ const TEN_YEARS_IN_SECONDS

+ const WIREGUARD_INTERFACE

+ var NAMES = []string

+ var NAT_Types = struct{ ... }

+ var OS_Types = struct{ ... }

+ var SMALL_NAMES = []string

+ func FormatBool(b bool) string

+ func GenerateNodeName() string

+ func IsIpv4Net(host string) bool

+ func ParseBool(s string) bool

+ func RetrieveLogo() string

+ func SetLogo(logo string)

+ func StringWithCharset(length int, charset string) string

+ type APIEnrollmentKey struct

+ Expiration int64

+ Networks []string

+ Tags []string

+ Type KeyType

+ Unlimited bool

+ UsesRemaining int

+ type AccessToken struct

+ APIConnString string

+ type ApiHost struct

+ Debug bool

+ DefaultInterface string

+ EndpointIP string

+ FirewallInUse string

+ ID string

+ Interfaces []Iface

+ IsDefault bool

+ IsRelay bool

+ IsRelayed bool

+ IsStatic bool

+ ListenPort int

+ MTU int

+ MacAddress string

+ Name string

+ NatType string

+ Nodes []string

+ OS string

+ PersistentKeepalive int

+ PublicKey string

+ RelayedBy string

+ RelayedHosts []string

+ Verbosity int

+ Version string

+ WgPublicListenPort int

+ func (a *ApiHost) ConvertAPIHostToNMHost(currentHost *Host) *Host

+ type ApiNode struct

+ Address string

+ Address6 string

+ AllowedIPs []string

+ Connected bool

+ DNSOn bool

+ DefaultACL string

+ EgressGatewayNatEnabled bool

+ EgressGatewayRanges []string

+ ExpirationDateTime int64

+ Failover bool

+ FailoverNode string

+ HostID string

+ ID string

+ IngressDns string

+ InternetGateway string

+ IsEgressGateway bool

+ IsIngressGateway bool

+ IsRelay bool

+ IsRelayed bool

+ LastCheckIn int64

+ LastModified int64

+ LastPeerUpdate int64

+ LocalAddress string

+ Network string

+ NetworkRange string

+ NetworkRange6 string

+ PendingDelete bool

+ RelayedBy string

+ RelayedNodes []string

+ Server string

+ func (a *ApiNode) ConvertToServerNode(currentNode *Node) *Node

+ type AuthParams struct

+ ID string

+ MacAddress string

+ Password string

+ type CheckInResponse struct

+ IsPending bool

+ NeedConfigUpdate bool

+ NeedDelete bool

+ NeedKeyUpdate bool

+ NeedPeerUpdate bool

+ NodeMessage string

+ Success bool

+ type Claims struct

+ ID string

+ MacAddress string

+ Network string

+ type ClientConfig struct

+ Key string

+ Network string

+ type CommonNode struct

+ Action string

+ Address net.IPNet

+ Address6 net.IPNet

+ Connected bool

+ DNSOn bool

+ EgressGatewayRanges []string

+ HostID uuid.UUID

+ ID uuid.UUID

+ IngressDNS string

+ InternetGateway *net.UDPAddr

+ IsEgressGateway bool

+ IsIngressGateway bool

+ IsRelay bool

+ IsRelayed bool

+ LocalAddress net.IPNet

+ Network string

+ NetworkRange net.IPNet

+ NetworkRange6 net.IPNet

+ RelayedBy string

+ RelayedNodes []string

+ Server string

+ type CustomExtClient struct

+ ClientID string

+ DNS string

+ DeniedACLs map[string]struct{}

+ Enabled bool

+ ExtraAllowedIPs []string

+ PublicKey string

+ RemoteAccessClientID string

+ type DNSEntry struct

+ Address string

+ Address6 string

+ Name string

+ Network string

+ type DNSError struct

+ ErrorStrings []string

+ func (e DNSError) Error() string

+ type DNSUpdate struct

+ Action DNSUpdateAction

+ Address string

+ Name string

+ NewAddress string

+ NewName string

+ type DNSUpdateAction int

+ func (action DNSUpdateAction) String() string

+ type DisplayKey struct

+ Name string

+ Uses int

+ type EgressGatewayRequest struct

+ NatEnabled string

+ NetID string

+ NodeID string

+ Ranges []string

+ type EgressInfo struct

+ EgressGWCfg EgressGatewayRequest

+ EgressGwAddr net.IPNet

+ EgressID string

+ Network net.IPNet

+ type EgressNetworkRoutes struct

+ EgressRanges []string

+ NodeAddr net.IPNet

+ type EnrollmentKey struct

+ Expiration time.Time

+ Networks []string

+ Tags []string

+ Token string

+ Type KeyType

+ Unlimited bool

+ UsesRemaining int

+ Value string

+ func (k *EnrollmentKey) IsValid() bool

+ func (k *EnrollmentKey) Validate() bool

+ type EnrollmentToken struct

+ Server string

+ Value string

+ type Error string

+ func (e Error) Error() string

+ type ErrorResponse struct

+ Code int

+ Message string

+ type ExtClient struct

+ Address string

+ Address6 string

+ ClientID string

+ DNS string

+ DeniedACLs map[string]struct{}

+ Enabled bool

+ ExtraAllowedIPs []string

+ IngressGatewayEndpoint string

+ IngressGatewayID string

+ LastModified int64

+ Network string

+ OwnerID string

+ PrivateKey string

+ PublicKey string

+ RemoteAccessClientID string

+ type ExtClientInfo struct

+ ExtPeerAddr net.IPNet

+ ExtPeerKey string

+ IngGwAddr net.IPNet

+ Masquerade bool

+ Network net.IPNet

+ Peers map[string]PeerRouteInfo

+ type ExtPeersResponse struct

+ Address string

+ Address6 string

+ Endpoint string

+ KeepAlive int32

+ ListenPort int32

+ LocalAddress string

+ LocalListenPort int32

+ PublicKey string

+ type FwUpdate struct

+ EgressInfo map[string]EgressInfo

+ IsEgressGw bool

+ type GlobalConfig struct

+ Name string

+ type HookDetails struct

+ Hook func() error

+ Interval time.Duration

+ type Host struct

+ AutoUpdate bool

+ DaemonInstalled bool

+ Debug bool

+ DefaultInterface string

+ EndpointIP net.IP

+ FirewallInUse string

+ HostPass string

+ ID uuid.UUID

+ IPForwarding bool

+ Interface string

+ Interfaces []Iface

+ IsDefault bool

+ IsDocker bool

+ IsK8S bool

+ IsStatic bool

+ ListenPort int

+ MTU int

+ MacAddress net.HardwareAddr

+ Name string

+ NatType string

+ Nodes []string

+ OS string

+ PersistentKeepalive time.Duration

+ PublicKey wgtypes.Key

+ TrafficKeyPublic []byte

+ TurnEndpoint *netip.AddrPort

+ Verbosity int

+ Version string

+ WgPublicListenPort int

+ func (h *Host) ConvertNMHostToAPI() *ApiHost

+ type HostInfoMap map[string]HostNetworkInfo

+ type HostMqAction string

+ const Acknowledgement

+ const CheckIn

+ const DeleteHost

+ const JoinHostToNetwork

+ const RegisterWithTurn

+ const RequestAck

+ const RequestPull

+ const SignalHost

+ const UpdateHost

+ const UpdateKeys

+ const Upgrade

+ type HostNetworkInfo struct

+ Interfaces []Iface

+ IsStatic bool

+ ListenPort int

+ type HostPeerUpdate struct

+ EgressRoutes []EgressNetworkRoutes

+ EndpointDetection bool

+ FwUpdate FwUpdate

+ Host Host

+ HostNetworkInfo HostInfoMap

+ NodeAddrs []net.IPNet

+ NodePeers []wgtypes.PeerConfig

+ PeerIDs PeerMap

+ Peers []wgtypes.PeerConfig

+ Server string

+ ServerAddrs []ServerAddr

+ ServerVersion string

+ type HostPull struct

+ Host Host

+ Nodes []Node

+ PeerIDs PeerMap

+ Peers []wgtypes.PeerConfig

+ ServerConfig ServerConfig

+ type HostRelayRequest struct

+ HostID string

+ RelayedHosts []string

+ type HostTurnRegister struct

+ HostID string

+ HostPassHash string

+ type HostUpdate struct

+ Action HostMqAction

+ Host Host

+ Node Node

+ Signal Signal

+ type IDandAddr struct

+ Address string

+ ID string

+ IsExtClient bool

+ IsServer string

+ ListenPort int

+ Name string

+ Network string

+ type Iface struct

+ Address net.IPNet

+ AddressString string

+ Name string

+ type IngressGwUsers struct

+ Network string

+ NodeID string

+ Users []ReturnUser

+ type IngressInfo struct

+ EgressRanges []string

+ ExtPeers map[string]ExtClientInfo

+ type IngressRequest struct

+ ExtclientDNS string

+ Failover bool

+ type IntClient struct

+ AccessKey string

+ Address string

+ Address6 string

+ ClientID string

+ IsServer string

+ Network string

+ PrivateKey string

+ PublicKey string

+ ServerAPIPort string

+ ServerKey string

+ ServerPrivateAddress string

+ ServerPublicEndpoint string

+ ServerWGPort string

+ type JoinData struct

+ Host Host

+ Key string

+ Node Node

+ type KeyType int

+ const TimeExpiration

+ const Undefined

+ const Unlimited

+ const Uses

+ func (k KeyType) String() string

+ type KeyUpdate struct

+ Interface string

+ Network string

+ type LegacyNode struct

+ AccessKey string

+ Action string

+ Address string

+ Address6 string

+ AllowedIPs []string

+ Connected string

+ DNSOn string

+ DefaultACL string

+ EgressGatewayNatEnabled string

+ EgressGatewayRanges []string

+ EgressGatewayRequest EgressGatewayRequest

+ Endpoint string

+ ExpirationDateTime int64

+ Failover string

+ FailoverNode string

+ FirewallInUse string

+ ID string

+ IPForwarding string

+ IngressGatewayRange string

+ IngressGatewayRange6 string

+ Interface string

+ Interfaces []Iface

+ InternetGateway string

+ IsDocker string

+ IsEgressGateway string

+ IsHub string

+ IsIngressGateway string

+ IsK8S string

+ IsPending string

+ IsRelay string

+ IsRelayed string

+ IsServer string

+ IsStatic string

+ LastCheckIn int64

+ LastModified int64

+ LastPeerUpdate int64

+ ListenPort int32

+ LocalAddress string

+ LocalListenPort int32

+ MTU int32

+ MacAddress string

+ Name string

+ Network string

+ NetworkSettings Network

+ OS string

+ OwnerID string

+ Password string

+ PersistentKeepalive int32

+ PublicKey string

+ RelayAddrs []string

+ Server string

+ TrafficKeys TrafficKeys

+ UDPHolePunch string

+ Version string

+ func (ln *LegacyNode) ConvertToNewNode() (*Host, *Node)

+ func (node *LegacyNode) NameInNodeCharSet() bool

+ func (node *LegacyNode) SetDNSOnDefault()

+ func (node *LegacyNode) SetDefaultACL()

+ func (node *LegacyNode) SetDefaultAction()

+ func (node *LegacyNode) SetDefaultEgressGateway()

+ func (node *LegacyNode) SetDefaultFailover()

+ func (node *LegacyNode) SetDefaultIngressGateway()

+ func (node *LegacyNode) SetDefaultIsDocker()

+ func (node *LegacyNode) SetDefaultIsHub()

+ func (node *LegacyNode) SetDefaultIsK8S()

+ func (node *LegacyNode) SetDefaultIsRelay()

+ func (node *LegacyNode) SetDefaultIsRelayed()

+ func (node *LegacyNode) SetDefaultMTU()

+ func (node *LegacyNode) SetDefaultNFTablesPresent()

+ func (node *LegacyNode) SetDefaultName()

+ func (node *LegacyNode) SetIPForwardingDefault()

+ func (node *LegacyNode) SetIsServerDefault()

+ func (node *LegacyNode) SetIsStaticDefault()

+ type LicenseLimits struct

+ Clients int

+ Hosts int

+ Networks int

+ Servers int

+ Users int

+ type Metric struct

+ ActualUptime time.Duration

+ Connected bool

+ Latency int64

+ NodeName string

+ PercentUp float64

+ TotalReceived int64

+ TotalSent int64

+ TotalTime int64

+ Uptime int64

+ type Metrics struct

+ Connectivity map[string]Metric

+ FailoverPeers map[string]string

+ Network string

+ NodeID string

+ NodeName string

+ type MetricsMap map[string]Metrics

+ type MigrationData struct

+ HostName string

+ LegacyNodes []LegacyNode

+ OS string

+ Password string

+ type Network struct

+ AddressRange string

+ AddressRange6 string

+ AllowManualSignUp string

+ DefaultACL string

+ DefaultInterface string

+ DefaultKeepalive int32

+ DefaultListenPort int32

+ DefaultMTU int32

+ DefaultPostDown string

+ DefaultUDPHolePunch string

+ IsIPv4 string

+ IsIPv6 string

+ NetID string

+ NetworkLastModified int64

+ NodeLimit int32

+ NodesLastModified int64

+ func (network *Network) SetDefaults()

+ func (network *Network) SetNetworkLastModified()

+ func (network *Network) SetNodesLastModified()

+ type NetworkMetrics struct

+ Nodes MetricsMap

+ type Node struct

+ DefaultACL string

+ EgressGatewayNatEnabled bool

+ EgressGatewayRequest EgressGatewayRequest

+ ExpirationDateTime time.Time

+ Failover bool

+ FailoverNode uuid.UUID

+ IngressGatewayRange string

+ IngressGatewayRange6 string

+ LastCheckIn time.Time

+ LastModified time.Time

+ LastPeerUpdate time.Time

+ OwnerID string

+ PendingDelete bool

+ func (n *Node) Legacy(h *Host, s *ServerConfig, net *Network) *LegacyNode

+ func (newNode *Node) Fill(currentNode *Node, isPro bool)

+ func (nm *Node) ConvertToAPINode() *ApiNode

+ func (node *Node) DoesACLAllow() bool

+ func (node *Node) DoesACLDeny() bool

+ func (node *Node) NetworkSettings(n Network)

+ func (node *Node) PrimaryAddress() string

+ func (node *Node) PrimaryAddressIPNet() net.IPNet

+ func (node *Node) PrimaryNetworkRange() net.IPNet

+ func (node *Node) SetDefaultConnected()

+ func (node *Node) SetExpirationDateTime()

+ func (node *Node) SetLastCheckIn()

+ func (node *Node) SetLastModified()

+ func (node *Node) SetLastPeerUpdate()

+ type NodeAuth struct

+ ID string

+ MacAddress string

+ Network string

+ Password string

+ type NodeCheckin struct

+ Connected bool

+ Ifaces []Iface

+ Version string

+ type NodeGet struct

+ Host Host

+ HostPeers []wgtypes.PeerConfig

+ Node Node

+ PeerIDs PeerMap

+ Peers []wgtypes.PeerConfig

+ ServerConfig ServerConfig

+ type NodeJoinResponse struct

+ Host Host

+ Node Node

+ Peers []wgtypes.PeerConfig

+ ServerConfig ServerConfig

+ type NodesArray []Node

+ func (a NodesArray) Len() int

+ func (a NodesArray) Less(i, j int) bool

+ func (a NodesArray) Swap(i, j int)

+ type PeerMap map[string]IDandAddr

+ type PeerRouteInfo struct

+ Allow bool

+ ID string

+ PeerAddr net.IPNet

+ PeerKey string

+ type PeersResponse struct

+ Address string

+ Address6 string

+ EgressGatewayRanges string

+ Endpoint string

+ IsEgressGateway string

+ KeepAlive int32

+ ListenPort int32

+ LocalAddress string

+ LocalListenPort int32

+ PublicKey string

+ type RegisterMsg struct

+ JoinAll bool

+ Network string

+ Password string

+ RegisterHost Host

+ User string

+ type RegisterResponse struct

+ RequestedHost Host

+ ServerConf ServerConfig

+ type RelayRequest struct

+ NetID string

+ NodeID string

+ RelayedNodes []string

+ type ReturnUser struct

+ IsAdmin bool

+ IsSuperAdmin bool

+ LastLoginTime time.Time

+ RemoteGwIDs map[string]struct{}

+ UserName string

+ type SaveData struct

+ NetID string

+ type ServerAddr struct

+ Address string

+ IsLeader bool

+ type ServerConfig struct

+ API string

+ APIPort string

+ Broker string

+ CoreDNSAddr string

+ DNSMode string

+ IsPro bool

+ MQPassword string

+ MQPort string

+ MQUserName string

+ Server string

+ StunPort int

+ TrafficKey []byte

+ TurnDomain string

+ TurnPort int

+ UseTurn bool

+ Version string

+ type ServerIDs struct

+ ServerIDs []string

+ type ServerUpdateData struct

+ Node LegacyNode

+ UpdatePeers bool

+ type Signal struct

+ Action SignalAction

+ FromHostPubKey string

+ Reply bool

+ Server string

+ TimeStamp int64

+ ToHostPubKey string

+ TurnRelayEndpoint string

+ type SignalAction string

+ const ConnNegotiation

+ const Disconnect

+ type SsoState struct

+ Expiration time.Time

+ Value string

+ func (s *SsoState) IsExpired() bool

+ type SuccessResponse struct

+ Code int

+ Message string

+ Response interface{}

+ type SuccessfulLoginResponse struct

+ AuthToken string

+ ID string

+ type SuccessfulUserLoginResponse struct

+ AuthToken string

+ UserName string

+ type Telemetry struct

+ LastSend int64

+ TrafficKeyPriv []byte

+ TrafficKeyPub []byte

+ UUID string

+ type TrafficKeys struct

+ Mine []byte

+ Server []byte

+ type User struct

+ IsAdmin bool

+ IsSuperAdmin bool

+ LastLoginTime time.Time

+ Password string

+ RemoteGwIDs map[string]struct{}

+ UserName string

+ func (user *User) NameInCharSet() bool

+ type UserAuthParams struct

+ Password string

+ UserName string

+ type UserClaims struct

+ IsAdmin bool

+ IsSuperAdmin bool

+ UserName string

+ type UserRemoteGws struct

+ Connected bool

+ GWName string

+ GwClient ExtClient

+ GwID string

+ Network string

+ type UserRemoteGwsReq struct

+ RemoteAccessClientID string

v0.21.0

Sep 8, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.6

Aug 16, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.5

Jul 31, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.4

Jul 18, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.3

Jul 3, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.2

Jun 19, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.1

Jun 1, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.20.0

May 18, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.19.0

May 3, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.18.7

Apr 24, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.18.6

Apr 13, 2023 GO-2026-4608 +4 more

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.18.5

Mar 29, 2023 GO-2023-2022 +7 more

GO-2023-2022: Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker

GO-2023-2023: Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker

GO-2023-2025: Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker

GO-2026-4608: Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker

GO-2026-4651: Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker

GO-2026-4654: Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker

GO-2026-4655: Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

GO-2026-5588: Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker

v0.18.4

Mar 17, 2023 GO-2023-2022 +7 more