CVE-2025-49825

CRITICAL

9.8

Description

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published6/17/2025

Last Modified6/18/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-863

References

https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc(security-advisories@github.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.