GHSA-598g-h2vc-h5vgPublished
nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-47724 · Microsoft / collected KEV context
cve-program · CVE-2026-47724
- https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-598g-h2vc-h5vg
- https://github.com/forgekeep/nebula-mesh/commit/9d8bcd7667ecd0c2975cc71fb35a02fe131f76f2
nvd · CVE-2026-47724
- https://github.com/forgekeep/nebula-mesh/commit/9d8bcd7667ecd0c2975cc71fb35a02fe131f76f2
- https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-598g-h2vc-h5vg
osv · GHSA-598g-h2vc-h5vg
- https://github.com/juev/nebula-mesh/security/advisories/GHSA-598g-h2vc-h5vg
- https://github.com/forgekeep/nebula-mesh/commit/9d8bcd7667ecd0c2975cc71fb35a02fe131f76f2
- https://github.com/juev/nebula-mesh
osv · GO-2026-5139
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.