CVE-2026-44343: WGDashboard: Critical Vulnerability in 4.3.2

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-05-12 · updated 2026-06-17
Weakness: CWE-20

Description

WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.

Affected products

WGDashboard: before 4.3.2 — fixed in 4.3.2

How to fix

Upgrade to a fixed version: WGDashboard 4.3.2. Check the vendor advisory for mitigations.

References

https://github.com/WGDashboard/WGDashboard/commit/b15bbce9bc5554ec379d558f032c730db47fcea2
https://github.com/WGDashboard/WGDashboard/security/advisories/GHSA-rrf5-q4fp-qvgm

Get alerted when CVE-2026-44343 or the next vulnerability affects your stack