CVE-2026-53604— nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
Quick assessment
Affected
forgekeep nebula-mesh
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Forgekeep nebula-mesh是Forgekeep团队的一款构建安全虚拟专用网络的组网工具。 Forgekeep nebula-mesh 0.3.8之前版本存在安全漏洞，该漏洞源于renderMobileBundle处理程序在处理移动捆绑请求时，未在错误路径上清除CA私钥，导致明文CA私钥保留在Go堆中，攻击者读取进程内存可能恢复CA签名密钥，从而生成任意主机证书。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| forgekeep | nebula-mesh | < 0.3.8 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-53604
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
Source: CVE Program / CVE List V5
Vulnerability Description
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a *pki.CAManager, but Build never calls CAManager.Wipe() on any return path. As a result, when a mobile-bundle request goes through the web UI and Build returns — especially on error (missing network, invalid prefix, DB error, signing failure) — the plaintext CA private key remains on the Go heap, unwiped, until garbage collection. An attacker able to read process memory (core dump, swap, memory-scraping) can recover the CA signing key, which would allow minting arbitrary host certificates for the mesh. The API handler already does this correctly: it loads the CAManager, defer caMgr.Wipe(), and wraps it in caManagerResolver. Only the web path is affected. This issue has been patched in version 0.3.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的不恰当跨边界移除
Source: CVE Program / CVE List V5
Vulnerability Title
Forgekeep nebula-mesh 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Forgekeep nebula-mesh是Forgekeep团队的一款构建安全虚拟专用网络的组网工具。 Forgekeep nebula-mesh 0.3.8之前版本存在安全漏洞，该漏洞源于renderMobileBundle处理程序在处理移动捆绑请求时，未在错误路径上清除CA私钥，导致明文CA私钥保留在Go堆中，攻击者读取进程内存可能恢复CA签名密钥，从而生成任意主机证书。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| forgekeep | nebula-mesh | < 0.3.8 | - |
|
II. Public POCs for CVE-2026-53604
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53604
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-53604 (1)
Vendor Advisories for CVE-2026-53604 (1)
Vendor Pages for CVE-2026-53604 (1)
-
🔗 Release v0.3.8 · forgekeep/nebula-mesh · GitHub x_refsource_MISC
Same Patch Batch · forgekeep · 2026-09-04 · 7 CVEs total
| CVE-2026-61699 | 8.1 HIGH | nebula-mesh: Certificate revocation is never enforced at the mesh |
| CVE-2026-63464 | 7.7 HIGH | Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_priva |
| CVE-2026-53603 | 7.1 HIGH | nebula-mesh: Operator session tokens stored in plaintext in the database |
| CVE-2026-53602 | 6.9 MEDIUM | nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid |
| CVE-2026-55513 | 5.4 MEDIUM | nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hou |
| CVE-2026-55512 | 5.3 MEDIUM | nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entri |
IV. Related Vulnerabilities
Same product: nebula-mesh
-
CVE-2026-63464
Nebula-mesh allows non-admin operators to disable webhook SS -
CVE-2026-61699
nebula-mesh: Certificate revocation is never enforced at the -
CVE-2026-55513
nebula-mesh: Web UI host creation ignores configured enrollm -
CVE-2026-55512
nebula-mesh: Unauthenticated OIDC login endpoint allocates u -
CVE-2026-53603
nebula-mesh: Operator session tokens stored in plaintext in
Same vendor: forgekeep
-
CVE-2026-63464
Nebula-mesh allows non-admin operators to disable webhook SS -
CVE-2026-61699
nebula-mesh: Certificate revocation is never enforced at the -
CVE-2026-55513
nebula-mesh: Web UI host creation ignores configured enrollm -
CVE-2026-55512
nebula-mesh: Unauthenticated OIDC login endpoint allocates u -
CVE-2026-53603
nebula-mesh: Operator session tokens stored in plaintext in
Same weakness: CWE-212
-
CVE-2026-115363
OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB M -
CVE-2026-111387
Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS Li -
CVE-2026-107293
Pydantic AI OpenTelemetry instrumentation: retry prompt cont -
CVE-2026-107291
Pydantic AI OpenTelemetry instrumentation: exception events -
CVE-2026-96879
"Checked by" label in page history should not be shown if th
V. Comments for CVE-2026-53604
No comments yet