Neko has Self-service Privilege Escalation for Authenticated Users

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-39386 · Microsoft / collected KEV context

EUVD-2026-24027

GHSA-2gw9-c2r2-f5qf

GO-2026-4960

cve-program · CVE-2026-39386

• https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf
• https://github.com/m1k1o/neko/releases/tag/v3.0.11
• https://github.com/m1k1o/neko/releases/tag/v3.1.2

euvd · EUVD-2026-24027

• https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf
• https://github.com/m1k1o/neko/releases/tag/v3.0.11
• https://github.com/m1k1o/neko/releases/tag/v3.1.2

nvd · CVE-2026-39386

• https://github.com/m1k1o/neko/releases/tag/v3.0.11
• https://github.com/m1k1o/neko/releases/tag/v3.1.2
• https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf

osv · GHSA-2gw9-c2r2-f5qf

• https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf
• https://nvd.nist.gov/vuln/detail/CVE-2026-39386
• https://github.com/m1k1o/neko/commit/6b561feb9016badea99ae7305091c0ff55e1d114
• https://github.com/m1k1o/neko/commit/c54bcf1ee211e28104a2bb6db59583a39c4a4d6e
• https://github.com/m1k1o/neko
• https://github.com/m1k1o/neko/releases/tag/v3.0.11
• https://github.com/m1k1o/neko/releases/tag/v3.1.2

osv · GO-2026-4960

• https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf
• https://github.com/m1k1o/neko/commit/6b561feb9016badea99ae7305091c0ff55e1d114
• https://github.com/m1k1o/neko/commit/c54bcf1ee211e28104a2bb6db59583a39c4a4d6e
• https://github.com/m1k1o/neko/releases/tag/v3.0.11
• https://github.com/m1k1o/neko/releases/tag/v3.1.2

No related operational record is retained in the current change model.