CVE-2024-41260: Netbirdio Netbird

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

Affected products

• Netbirdio Netbird: version 0.28.4 only

Published 2024-08-01. Last modified 2026-06-17.