Netmaker's sqliteDeleteRecord function builds SQL DELETE statements by concatenating user input directly into the query string, creating a boolean-based SQL injection point that can be abused by an authenticated attacker. Exploiting this flaw can alter or delete entries in the database, which may change network configurations or compromise service availability. The vulnerability does not allow remote code execution, but it does enable unauthorized manipulation of critical data.

The issue affects Netmaker deployments released before version 1.5.0 from Gravitl. Critics relying on earlier versions are at risk; version 1.5.0 and later contain the fix.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The flaw is not listed in CISA's KEV catalog, and the attack requires a user who is already authenticated to the Netmaker platform. Overall, the risk is moderate but achievable under the right conditions.