Go/github.com/gravitational/teleport CVE-2025-49825: critical 9.8, EPSS 7.92%
Teleport allows remote authentication bypass
Action: Upgrade github.com/gravitational/teleport to 12.4.35 or later.
go get github.com/gravitational/teleport@v17.5.2go get github.com/gravitational/teleport@v16.5.12go get github.com/gravitational/teleport@v15.5.3go get github.com/gravitational/teleport@v14.4.1go get github.com/gravitational/teleport@v13.4.27go get github.com/gravitational/teleport@v12.4.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 17.0.0 | 17.5.2 | - |
| 16.0.0 | 16.5.12 | - |
| 15.0.0 | 15.5.3 | - |
| 14.0.0 | 14.4.1 | - |
| 13.0.0 | 13.4.27 | - |
| 0.0.11 | 12.4.35 | - |
| 0 | - | - |
Fixed versions
| 17.5.2 | 16.5.12 | 15.5.3 | 14.4.1 | 13.4.27 | 12.4.35 |
Sources
- osv: GHSA-8cqv-pj7f-pwpc
- https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc
- https://nvd.nist.gov/vuln/detail/CVE-2025-49825
- https://github.com/gravitational/teleport
CVE-2025-49825 · published · modified · JSON