GO-2026-4655 Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker

Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker...

GHSA-HMQR-WJMJ-376C Netmaker has Insufficient Authorization in Host Token Verification

The Authorise middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication hostAllowed=true, a valid host token bypasses all subsequent authorisation checks without verifying that the host is authorised to access the specific requested resource. Any entit...