GO-2026-4566
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level in github.com/h44z/wg-portal
Details
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level in github.com/h44z/wg-portal.
NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)
The additional affected modules and versions are: github.com/h44z/wg-portal before v2.1.3.
Are you affected?
Enter the version of the package you're using.
Affected packages
0No fixed version published yet for github.com/h44z/wg-portal (go modules). Pin to a known-safe version or switch to an alternative.
References
- https://github.com/h44z/wg-portal/security/advisories/GHSA-5rmx-256w-8mj9[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-27899[ADVISORY]
- https://github.com/h44z/wg-portal/commit/fe4485037a25426446ced95050e9498f477bf71d[FIX]
- https://github.com/h44z/wg-portal/releases/tag/v2.1.3[WEB]
- https://hub.docker.com/layers/wgportal/wg-portal/v2.1.3/images/sha256-39acfab55598a74e561828b8cb639515ddc222d6c884996111f5ef235aba9e7b[WEB]