Netbird connects without user authentication when switching the logged #1579

Open
opened 2025-11-20 05:33:10 -05:00 by saavagebueno · 2 comments
Owner

Originally created by @Rainson12 on GitHub (Jan 29, 2025).

Describe the problem
When connecting to a network via Netbird, it is possible to establish a connection without authentication if a different user on the system has already authenticated before.

To Reproduce

  • Logon to Windows 11 and Create another User on the device.
  • Establish a connection to your Network using Netbird (you will be prompted for authentication)
  • Sign-Out of the Windows logged in User
  • Login with another User on the device
  • Run Netbird Application
  • Click Connect Button (you will not be prompted for authentication and just be connected)

Expected behavior

When switching the logged on user on a Windows device I must reauthenticate when establishing connection using netbird
A clear and concise description of what you expected to happen.

Are you using NetBird Cloud?

No

NetBird version
0.36.5

Do you face any (non-mobile) client issues?

not tested

Additional context

I am using Windows 11

Originally created by @Rainson12 on GitHub (Jan 29, 2025). **Describe the problem** When connecting to a network via Netbird, it is possible to establish a connection without authentication if a different user on the system has already authenticated before. **To Reproduce** * Logon to Windows 11 and Create another User on the device. * Establish a connection to your Network using Netbird (you will be prompted for authentication) * Sign-Out of the Windows logged in User * Login with another User on the device * Run Netbird Application * Click Connect Button (you will **not** be prompted for authentication and just be connected) **Expected behavior** When switching the logged on user on a Windows device I must reauthenticate when establishing connection using netbird A clear and concise description of what you expected to happen. **Are you using NetBird Cloud?** No **NetBird version** 0.36.5 **Do you face any (non-mobile) client issues?** not tested **Additional context** I am using Windows 11
saavagebueno added the triage-needed label 2025-11-20 05:33:10 -05:00
Author
Owner

@1nerdyguy commented on GitHub (Jan 29, 2025):

I could be wrong, but I believe this is due to how it handles sessions. The session is linked to the device, not the currently logged in user.

For our shared user devices, we instead use access codes, and limit the access for the device to the lowest common denominator of permissions. It's not ideal, and would love to see Netbird detect user logon/logoff events from the OS

@1nerdyguy commented on GitHub (Jan 29, 2025): I could be wrong, but I believe this is due to how it handles sessions. The session is linked to the device, not the currently logged in user. For our shared user devices, we instead use access codes, and limit the access for the device to the lowest common denominator of permissions. It's not ideal, and would love to see Netbird detect user logon/logoff events from the OS
Author
Owner

@florian-obradovic commented on GitHub (Jan 29, 2025):

Exactly - there is only one system wide Netbird config which is authenticated bei either a) a setup key or b) the first user who authenticated Netbird...

@florian-obradovic commented on GitHub (Jan 29, 2025): Exactly - there is only one system wide Netbird config which is authenticated bei either a) a setup key or b) the first user who authenticated Netbird...
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1579