Go/github.com/h44z/wg-portal CVE-2026-27899: high 8.8, EPSS 0.35%
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level in github.com/h44z/wg-portal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4566
- nvd: CVE-2026-27899
- https://github.com/h44z/wg-portal/security/advisories/GHSA-5rmx-256w-8mj9
- https://github.com/h44z/wg-portal/commit/fe4485037a25426446ced95050e9498f477bf71d
- https://github.com/h44z/wg-portal/releases/tag/v2.1.3
- https://hub.docker.com/layers/wgportal/wg-portal/v2.1.3/images/sha256-39acfab55598a74e561828b8cb639515ddc222d6c884996111f5ef235aba9e7b
CVE-2026-27899 · published · modified · JSON