Go/github.com/bishopfox/sliver CVE-2024-41111: high 8.8, EPSS 0.71%

Sliver Allows Authenticated Operator-to-Server Remote Code Execution

Action: Upgrade github.com/bishopfox/sliver to 1.6.0 or later.

go get github.com/bishopfox/sliver@v1.6.0

Affected

Fixed versions

Sources

• osv: GHSA-hc5w-gxxr-w8x8
• https://github.com/BishopFox/sliver/security/advisories/GHSA-hc5w-gxxr-w8x8
• https://nvd.nist.gov/vuln/detail/CVE-2024-41111
• https://github.com/BishopFox/sliver/issues/65
• https://github.com/BishopFox/sliver/pull/1281
• https://github.com/BishopFox/sliver/commit/0deaee625d14c6f05f63c86e5c3b7ae623a1138f
• https://github.com/BishopFox/sliver/commit/5016fb8d7cdff38c79e22e8293e58300f8d3bd57
• https://github.com/BishopFox/sliver/commit/d8ff64222dc69d931197d0bbae3fba11dbe17533
• https://github.com/BishopFox/sliver
• https://sliver.sh/docs?name=Multi-player+Mode

CVE-2024-41111 · published 2024-07-18T20:23:24Z · modified 2026-09-10T03:50:16.751045307Z · JSON