netbird

v0.74.4 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 16d VPN & Tunnels

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

go mesh mesh-networks nat-traversal netbird vpn

+3 more

wireguard-vpn wiretrustee zero-trust-network-access

Affected surfaces

auth deps

Summary

AI summary

Fixes a management‑plane DNS push bug and adds client recovery from RosenPass key desynchronization.

Type	Severity	Summary	CVE
Dependency	Low	Bumps golang.org/x/crypto dependency to v0.54.0 in client. Bumps golang.org/x/crypto dependency to v0.54.0 in client. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes reverse proxy domain being pushed as DNS search domain in management component. Fixes reverse proxy domain being pushed as DNS search domain in management component. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Recovers from rosenpass key desync in client. Recovers from rosenpass key desync in client. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

[management] fix: prevent reverse proxy domain from being pushed as DNS search domain by @blaugrau90 in https://github.com/netbirdio/netbird/pull/6498
[client] Recover from rosenpass key desync by @lixmal in https://github.com/netbirdio/netbird/pull/6714
[client] Bump golang.org/x/crypto to v0.54.0 by @lixmal in https://github.com/netbirdio/netbird/pull/6709

@blaugrau90 made their first contribution in https://github.com/netbirdio/netbird/pull/6498

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.74.3...v0.74.4

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track netbird

Get notified when new releases ship.

About netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.