PT-2025-42771 · Docker+2 · Docker+2

Adam Sobieraj · Published 2025-09-11 · Updated 2025-11-07 · CVE-2025-10678

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NetBird VPN versions prior to 0.57.0

Description NetBird VPN, when installed using the vendor’s provided script, did not remove or change the default password of an admin account created by ZITADEL. This potentially allows for full remote takeover with zero user interaction. Instances created with Docker may also be affected if the default password was not changed or the user was not removed.

Recommendations Update to version 0.57.0 or later.

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2025-13935

CVE-2025-10678

GHSA-G3J4-58MP-3X25

GO-2025-4040

OPENSUSE-SU-2025:15710-1

Affected Products

Docker

Netbird Vpn

Zitadel

References · 87

• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4040 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g3j4-58mp-3x25 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10678 · Security Note
• https://github.com/netbirdio/netbird · Note
• https://github.com/netbirdio/netbird/pull/4482 · Note
• https://github.com/netbirdio/netbird/commit/cf7f6c355f713e83cf171b79e08dac60b316e4fd · Note
• https://suse.com/security/cve/CVE-2016-11067 · Note
• https://suse.com/security/cve/CVE-2025-58073 · Note
• https://suse.com/security/cve/CVE-2016-11078 · Note
• https://suse.com/security/cve/CVE-2025-59043 · Note
• https://suse.com/security/cve/CVE-2025-11375 · Note
• https://suse.com/security/cve/CVE-2025-54471 · Note
• https://suse.com/security/cve/CVE-2016-11077 · Note