Denial of Service Vulnerability in Netmaker by Gravitl
CVE-2026-29771

8.7HIGH

Key Information:

Vendor

Gravitl

Status
Netmaker
Vendor
CVE Published:
7 March 2026

What is CVE-2026-29771?

The Netmaker product by Gravitl is susceptible to a Denial of Service vulnerability due to its /api/server/shutdown endpoint. This flaw allows unauthorized users to continuously terminate the Netmaker server process using syscall.SIGINT, resulting in a persistent disruption of service with approximately 3-second restart intervals. The issue has been resolved in version 1.2.0, emphasizing the importance of updating to mitigate potential service interruptions. Further details can be found in the advisory at GitHub.

Affected Version(s)

netmaker < 1.2.0

References

https://github.com/gravitl/netmaker/security/advisories/G...
x_refsource_CONFIRM

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.