CVE-2026-105980: Command Injection in WireGuard VPN

Published Nov 3, 2026

Updated

Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

Affected Software

7 affected components

ubuntu/wireguard*

Event History

Nov 3, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·08:59 AM

Data Sourced

via MITRE·08:59 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be remote and already hold high privileges. No user interaction is required.

What is the impact if exploitation succeeds?

An attacker may inject system commands through the WireGuard VPN function and execute them with root privileges. This can affect confidentiality, integrity, and availability.

CVE-2026-105980: Command Injection in WireGuard VPN

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact if exploitation succeeds?