An unauthenticated authentication bypass vulnerability in Netmaker allows attackers to forge JWT tokens and gain unauthorized access to network host data.

This is an authentication bypass vulnerability occurring in the VerifyHostToken function within logic/jwts.go. The application fails to validate the JWT signature, allowing an unauthenticated attacker to forge tokens and impersonate any host.

The ability to bypass authentication and impersonate hosts poses a severe risk to network integrity and confidentiality. An attacker could potentially gain unauthorized access to sensitive information transmitted across the network, leading to data exposure and loss of trust in the infrastructure. With a CVSS score of 8.2, this vulnerability is classified as High severity and requires immediate attention to prevent unauthorized administrative or host-level access.

Immediate Action: Update Netmaker to version 1.5.0 or later to ensure proper JWT signature validation is enforced.

Proactive Monitoring: Review system and application logs for suspicious JWT activity or authentication requests originating from unexpected or unauthorized host identities.

Compensating Controls: Deploy a Web Application Firewall or network access control list to restrict access to the Netmaker management interface to known, trusted IP addresses until the patch is applied.

Public Exploit Available: Yes, a published PoC exists (the vulnerability is detailed in the referenced Zyenra security advisory).

Given the High severity of this vulnerability and the presence of a published proof-of-concept, organizations running Netmaker must prioritize patching immediately. Failure to update to version 1.5.0 leaves the network vulnerable to impersonation attacks that can bypass existing security controls. Administrators should verify the update installation and audit logs for any signs of exploitation attempts prior to the remediation window.