Wgdashboard
Monthly
Unauthenticated host file system access in WGDashboard before 4.3.2 lets remote attackers reach protected functionality and read arbitrary server files without logging in. The root cause is a broken authentication gate combined with an unauthenticated file-download endpoint that accepted attacker-controlled file paths. No public exploit identified at time of analysis, but the fixing commit is public and the flaw is trivially reachable, while EPSS remains low at 0.12%.
Unauthenticated host file system access in WGDashboard before 4.3.2 lets remote attackers reach protected functionality and read arbitrary server files without logging in. The root cause is a broken authentication gate combined with an unauthenticated file-download endpoint that accepted attacker-controlled file paths. No public exploit identified at time of analysis, but the fixing commit is public and the flaw is trivially reachable, while EPSS remains low at 0.12%.