github.com/gravitl/netmaker is using weak cryptography. The vulnerability exists because a hard-coded cryptographic key is used in the code base which allows an attacker to pass specially crafted data to the application and execute arbitrary commands on the system.
github.com/gravitl/netmaker/commit/3d4f44ecfe8be4ca38920556ba3b90502ffb4fee
github.com/gravitl/netmaker/commit/e9bce264719f88c30e252ecc754d08f422f4c080
github.com/gravitl/netmaker/pull/781
github.com/gravitl/netmaker/pull/781/commits/1bec97c662670dfdab804343fc42ae4b1d050a87
github.com/gravitl/netmaker/security/advisories/GHSA-86f3-hf24-76q4