CVE-2026-105979: Command Injection
Published Nov 3, 2026
·Updated
Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
Event History
Nov 3, 2026
CVE Published
via NVD·09:17 AM
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be remote and already hold high privileges. No user interaction is required.
2
What is the potential impact if exploitation succeeds?
An attacker may inject system commands through the ZeroTier VPN function and execute them with root privileges. This can compromise confidentiality, integrity, and availability of the affected system.