Teleport - Authentication Bypass

Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems. id: CVE-2025-49825 info: name: Teleport - Authentication Bypass author: pdteam severity: critical description: | Teleport...

teleport-17.5.3-1.1 on GA media (moderate)

teleport-17.5.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15300-1 Rating: moderate Cross-References: CVE-2025-49825 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-49825

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch...

CVE-2025-49825

CVE-2025-49825 affects Teleport Community Edition and versions up to and including 17.5.1, enabling a remote authentication bypass. The NVD/NVD-adjacent entries describe a high-severity issue with potential full access to affected infrastructure. The Nuclei and OSV entries corroborate remote auth...

Incorrect Authorization

Overview github.com/gravitational/teleport/lib/client is a privileged access management tool. Affected versions of this package are vulnerable to Incorrect Authorization when validating SSH host certificate signatures. Due to a related issue in the processing of IsUserAuthority and IsHostAuthorit...