Skip to content
OpenAdvisories

Package · Go

github.com/bishopfox/sliver

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-34227 Public exploit

    Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltra…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.7
    CVE-2026-32941 Public exploit

    Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

    Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGRe…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 6.5
    CVE-2026-25760

    Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path tr…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium —
    GHSA-hjr9-wj7v-7hv8

    Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass

    ### Summary A specially crafted nonce routes unauthenticated requests through the NoEncoder path, where `startSessionHandler()` reads the entire request body without limits, allowing attacker-driven memory exhaustion and process crash. ### Details - `server/e…

    github.com/bishopfox/sliver Go
  • Medium 6.3
    CVE-2025-27093

    Sliver does not restricted traffic between Wireguard clients.

    Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each …

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 6.9
    CVE-2025-27090

    Server-Side Request Forgery (SSRF) in sliver teamserver

    Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the slive…

    BishopFox sliver github.com/bishopfox/sliver Go