WGDashboard vulnerabilities
We track 4 vulnerabilities in WGDashboard products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
Latest WGDashboard vulnerabilities
- 9.8 Critical severity
WGDashboard: Improper Neutralization of Special Elements Used in a Template Engine
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
- 9.8 Critical severity
WGDashboard: Improper Neutralization of Special Elements used in an OS Command
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
- 9.8 Critical severity
WGDashboard: Server-Side Request Forgery
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
- 9.8 Critical severity
WGDashboard is a dashboard for WireGuard VPN.
WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.