Wg-easy vulnerabilities
We track 2 vulnerabilities in Wg-easy products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest Wg-easy vulnerabilities
- 9.9 Critical severity
wg-easy: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to t
- 9.3 Critical severity
wg-easy: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 10