Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
netbirdio/netbird
main @ 11733fd
98
Fixes
0
CVEs
CRITICAL
Peak severity
48.6%
Coverage
Highlights
Auth Bypass: 42 prior fixes. Scrutinize any change in this area.
management/server/account.go: most-fixed (10 issues). Treat as high-risk during review.
74 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple critical and high-severity auth bypasses in the HTTP middleware, including account impersonation via query parameter and missing child-account validation, allowing unauthorized cross-account access.
Auth Bypass: Recurring authorization bypasses in account management, including missing permission checks on sensitive operations like peer approval, invite redemption, and service-user access, allowing unauthorized actions.
Firewall Bypass: Multiple firewall bypasses due to rule ordering, overly broad default allow rules, and missing guards in iptables/nftables, allowing unauthorized traffic to bypass ACL filtering.