ztnet vulnerabilities

CVEs whose affected-version data names the ztnet package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62967High· 8.1PoC

1w ago

ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through `POST /api/a…

▾ Midnightsinamics · ztnetEPSS 0.37%via CVEORG