Go/github.com/netbirdio/netbird CVE-2025-10678: critical 9.3, EPSS 0.42%
NetBird VPN does not remove the default password of an admin account
Action: Upgrade github.com/netbirdio/netbird to 0.57.0 or later.
go get github.com/netbirdio/netbird@v0.57.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.57.0 | - |
Fixed versions
| 0.57.0 |
Sources
- osv: GHSA-g3j4-58mp-3x25
- nvd: CVE-2025-10678
- https://github.com/netbirdio/netbird/commit/cf7f6c355f713e83cf171b79e08dac60b316e4fd
- https://cert.pl/en/posts/2025/10/CVE-2025-10678
- https://github.com/netbirdio/netbird
- https://netbird.io
CVE-2025-10678 · published · modified · JSON