{"id":"CVE-2025-49825","aliases":["EUVD-2025-18566","GHSA-8cqv-pj7f-pwpc","GO-2025-3763","openSUSE-SU-2025:15300-1","openSUSE-SU-2025:15405-1"],"status":"published","title":"Teleport allows remote authentication bypass","description":"Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.07924,"percentile":0.94798,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2025-06-16T17:16:31Z","modified":"2026-10-28T02:31:09Z","exploits":[{"source":"nuclei","id":"CVE-2025-49825","title":"Teleport - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49825.yaml"}],"fixes":[{"ecosystem":"Go","package":"github.com/gravitational/teleport","fixed_in":["17.5.2","16.5.12","15.5.3","14.4.1","13.4.27","12.4.35"],"sources":["ghsa","osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"teleport","fixed_in":["17.5.3-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.0"},{"fixed":"17.5.2"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.5.12"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"15.5.3"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.0.0"},{"fixed":"14.4.1"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"13.4.27"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.11"},{"fixed":"12.4.35"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.0.0-20250616162021-79b2f26125a1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"17.0.0"},{"fixed":"17.5.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.5.12"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.5.3"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.4.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"13.4.27"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.11"},{"fixed":"12.4.35"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.0.0-20250616162021-79b2f26125a1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gravitational/teleport","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.11"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.3-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250730T213748-1.1"}]}],"bundled":56}],"products":[{"vendor":"gravitational","product":"teleport"}],"references":[{"url":"https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc","tags":["x_refsource_CONFIRM","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49825","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8cqv-pj7f-pwpc"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49825.json","tags":["advisory"]},{"url":"https://github.com/gravitational/teleport","tags":["package"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-51471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6624","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-49825","title":"Teleport allows remote authentication bypass","description":"Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.","status":"published","published":"2025-06-17T21:43:18.288Z","modified":"2025-06-18T13:40:25.413Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:24.473448Z"}],"euvd":[{"id":"EUVD-2025-18566","description":"Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.","status":"published","published":"2025-06-17T21:43:18Z","modified":"2025-06-18T13:40:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:20.512078Z"}],"ghsa":[{"id":"GHSA-8cqv-pj7f-pwpc","title":"Teleport allows remote authentication bypass","description":"### Impact\n\nA full technical disclosure and open-source patch will be published after the embargo period, ending on June 30th, to allow all users to upgrade.\n\nTeleport security engineers identified a critical security vulnerability that could allow remote authentication bypass of Teleport.  \n\nTeleport Cloud Infrastructure and CI/CD build, test, and release infrastructure aren’t affected. \n\nFor the full mitigation, upgrade both Proxy and Teleport agents. It is strongly recommend updating clients to the released patch versions as a precaution.\n\n\nHave questions? \n\n- OSS Community: [opensource@goteleport.com](mailto:opensource@goteleport.com) \n- Legal: [legal@goteleport.com](mailto:legal@goteleport.com)\n- Security: [security@goteleport.com](mailto:security@goteleport.com)\n- Customer Support: [goteleport.com/support](https://goteleport.com/support)\n- Media Inquiries: [teleport@babelpr.com](mailto:teleport@babelpr.com)\n\n### Patches\n\nFixed in versions: 17.5.2, 16.5.12, 15.5.3, 14.4.1, 13.4.27, 12.4.35.\n\nThese patches are available only on the [official Teleport distribution channels](https://goteleport.com/docs/installation/). \n\nThese versions are designated as _Critical Security Exception Versions_. \n\n_For these specific patch versions of Teleport Community Edition, the Community Edition restrictions are removed on employee count or revenue thresholds, as long as you apply the patch within thirty (30) days of its official release._\n\n_Please read the full text of the updated Teleport Community Edition license for details._","status":"published","published":"2025-06-16T17:16:31Z","modified":"2025-06-18T14:15:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:38:47.835488Z"}],"nvd":[{"id":"CVE-2025-49825","description":"Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.","status":"published","published":"2025-06-17T22:15:49.917Z","modified":"2026-06-17T09:31:57.647Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:11:13.247441Z"}],"osv":[{"id":"CVE-2025-49825","title":"Teleport allows remote authentication bypass","description":"Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.","status":"published","published":"2025-06-17T21:43:18.288Z","modified":"2026-10-28T02:31:09.226049942Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"GHSA-8cqv-pj7f-pwpc","title":"Teleport allows remote authentication bypass","description":"### Impact\n\nA full technical disclosure and open-source patch will be published after the embargo period, ending on June 30th, to allow all users to upgrade.\n\nTeleport security engineers identified a critical security vulnerability that could allow remote authentication bypass of Teleport.  \n\nTeleport Cloud Infrastructure and CI/CD build, test, and release infrastructure aren’t affected. \n\nFor the full mitigation, upgrade both Proxy and Teleport agents. It is strongly recommend updating clients to the released patch versions as a precaution.\n\n\nHave questions? \n\n- OSS Community: [opensource@goteleport.com](mailto:opensource@goteleport.com) \n- Legal: [legal@goteleport.com](mailto:legal@goteleport.com)\n- Security: [security@goteleport.com](mailto:security@goteleport.com)\n- Customer Support: [goteleport.com/support](https://goteleport.com/support)\n- Media Inquiries: [teleport@babelpr.com](mailto:teleport@babelpr.com)\n\n### Patches\n\nFixed in versions: 17.5.2, 16.5.12, 15.5.3, 14.4.1, 13.4.27, 12.4.35.\n\nThese patches are available only on the [official Teleport distribution channels](https://goteleport.com/docs/installation/). \n\nThese versions are designated as _Critical Security Exception Versions_. \n\n_For these specific patch versions of Teleport Community Edition, the Community Edition restrictions are removed on employee count or revenue thresholds, as long as you apply the patch within thirty (30) days of its official release._\n\n_Please read the full text of the updated Teleport Community Edition license for details._","status":"published","published":"2025-06-16T17:16:31Z","modified":"2025-07-28T20:42:04.56005Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:46:42.077781Z"},{"id":"GO-2025-3763","title":"Remote authentication bypass in github.com/gravitational/teleport","description":"Remote authentication bypass in github.com/gravitational/teleport.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: github.com/gravitational/teleport from v16.0.0 before v16.5.12; github.com/gravitational/teleport before v12.4.35, from v13.0.0 before v13.4.27, from v14.0.0 before v14.4.1, from v15.0.0 before v15.5.3, from v17.0.0 before v17.5.2.","status":"published","published":"2025-07-28T19:57:13Z","modified":"2025-07-28T20:42:04.56005Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:15300-1","title":"teleport-17.5.3-1.1 on GA media","description":"These are all security issues fixed in the teleport-17.5.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:37.013787Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15405-1","title":"govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250730T213748-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-04T00:00:00Z","modified":"2026-03-23T04:53:44.42671Z","updated_at":"2026-11-02T16:58:37.810934Z"}]}}