Forgekeep Nebula Mesh up to 0.3.7 Web Build cleartext storage in memory

Summaryinfo

A vulnerability, which was classified as critical, has been found in Forgekeep Nebula Mesh up to 0.3.7. Affected by this issue is the function Build of the component Web Handler. This manipulation causes cleartext storage in memory. The identification of this vulnerability is CVE-2026-53604. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability classified as critical was found in Forgekeep Nebula Mesh up to 0.3.7. Affected by this vulnerability is the function Build of the component Web Handler. The manipulation with an unknown input leads to a cleartext storage in memory vulnerability. The CWE definition for the vulnerability is CWE-316. The product stores sensitive information in cleartext in memory. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a *pki.CAManager, but Build never calls CAManager.Wipe() on any return path. As a result, when a mobile-bundle request goes through the web UI and Build returns — especially on error (missing network, invalid prefix, DB error, signing failure) — the plaintext CA private key remains on the Go heap, unwiped, until garbage collection. An attacker able to read process memory (core dump, swap, memory-scraping) can recover the CA signing key, which would allow minting arbitrary host certificates for the mesh. The API handler already does this correctly: it loads the CAManager, defer caMgr.Wipe(), and wraps it in caManagerResolver. Only the web path is affected. This issue has been patched in version 0.3.8.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-53604 since 06/09/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1555 for this issue.

Upgrading to version 0.3.8 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Forgekeep

Name

• Nebula Mesh

Version

• 0.3.0
• 0.3.1
• 0.3.2
• 0.3.3
• 0.3.4
• 0.3.5
• 0.3.6
• 0.3.7

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion