Live › vulnerability › CVE-2026-105979
ZeroTier's VPN function fails to validate input properly, so a remote attacker with high privileges can inject system commands. Those commands run with root privileges on the affected machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 09:19 UTC. All times on this page are UTC.
The description only says a remote attacker with high privileges (an admin-level account) can inject commands through a ZeroTier VPN function and run them as root. No source read so far names the product, vendor or versions. CERT@VDE is the CNA, so the likely targets are industrial or embedded devices with a ZeroTier VPN feature. Systems with no ZeroTier VPN feature, or where no untrusted party holds admin rights, are the lower priority.
No product ranges from the sources yet.
ZeroTier VPN function, which may be a feature of a device's firmware rather than the ZeroTier clientNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-105979")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.