Skip to content
OpenAdvisories

Package · Go

github.com/gravitational/teleport

2 known vulnerabilities.

2 results · Feed

  • Critical 9.8
    CVE-2025-49825 Scanner template

    Teleport allows remote authentication bypass

    Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.

  • High 8.8
    CVE-2022-36633 Public exploit EPSS 51%

    Improper token validation leading to code execution in Teleport

    Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a …