Security Advisories
BastionGuard advisories document affected versions, severity, impact, fixes, public references, and authorized researcher credit.
Command Injection in External URL Opening
CMS fields Advisory: Command Injection in External URL Opening Advisory ID: BGSA-2026-007 (proposed; confirm availability) Reporter reference: BG-05 (URL handler) CVE: Not assigned Severity: Medium (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 —…
- Component
- External URL
- Affected
- 2.0.3
- Fixed
- 2.0.4
Insufficient TLS Certificate Verification for Banking List Downloads
CMS fields Advisory: Insufficient TLS Certificate Verification for Banking List Downloads Advisory ID: BGSA-2026-006 (proposed; confirm availability) Reporter reference: BG-05 (TLS) CVE: Not assigned Severity: High (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3…
- Component
- Banking List
- Affected
- 2.0.3
- Fixed
- 2.0.4
Privilege Escalation via WireGuard Configuration Parameters
CMS fields Advisory: Privilege Escalation via WireGuard Configuration Parameters Advisory ID: BGSA-2026-005 (proposed; confirm availability) Reporter reference: BG-04 CVE: Not assigned Severity: Critical (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 — commit bb3a210…
- Component
- WireGuard Configuration
- Affected
- 2.0.3
- Fixed
- 2.0.4
Command Injection via Custom Update Source URLs
CMS fields Advisory: Command Injection via Custom Update Source URLs Advisory ID: BGSA-2026-004 (proposed; confirm availability) Reporter reference: BG-03 CVE: Not assigned Severity: High (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 — commit…
- Component
- Custom Update
- Affected
- 2.0.3
- Fixed
- 2.0.4
Privilege Escalation in Phishing Updater Authorization and Temporary File Handling
CMS fields Advisory: Privilege Escalation in Phishing Updater Authorization and Temporary File Handling Advisory ID: BGSA-2026-003 (proposed; confirm availability) Reporter reference: BG-02 CVE: Not assigned Severity: Critical (researcher-assessed; no CVSS score assigned) Affected version:…
- Component
- Phishing Updater
- Affected
- 2.0.3
- Fixed
- 2.0.4
Privilege Escalation via Permissive Polkit Maintenance Policy
CMS fields Advisory: Privilege Escalation via Permissive Polkit Maintenance Policy Advisory ID: BGSA-2026-002 (proposed; confirm availability) Reporter reference: BG-01 CVE: Not assigned Severity: Critical (researcher-assessed; no CVSS score assigned) Affected version: 2.0.3 — commit…
- Component
- Polkit Maintenance Policy
- Affected
- 2.0.3
- Fixed
- 2.0.4
Local Privilege Escalation via OS Command Injection in bastionguard-firewall
A local privilege-escalation vulnerability in the setuid-root bastionguard-firewall helper affects BastionGuard 2.0 and 2.0.1.
- Component
- bastionguard-firewall
- Affected
- 2.0, 2.0.1
- Fixed
- 2.0.2