Critical severity9.8OSV Advisory· Published Jun 17, 2025· Updated Apr 15, 2026
CVE-2025-49825
CVE-2025-49825
Description
Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/gravitational/teleportGo | >= 17.0.0, < 17.5.2 | 17.5.2 |
github.com/gravitational/teleportGo | >= 16.0.0, < 16.5.12 | 16.5.12 |
github.com/gravitational/teleportGo | >= 15.0.0, < 15.5.3 | 15.5.3 |
github.com/gravitational/teleportGo | >= 14.0.0, < 14.4.1 | 14.4.1 |
github.com/gravitational/teleportGo | >= 13.0.0, < 13.4.27 | 13.4.27 |
github.com/gravitational/teleportGo | >= 0.0.11, < 12.4.35 | 12.4.35 |
github.com/gravitational/teleportGo | <= 0.0.0-20250616162021-79b2f26125a1 | — |
Affected products
4- Range: 1.0.2, 2.1.0-alpha1, api/v14.1.3-dev.logan.1, …
- ghsa-coords3 versionspkg:golang/github.com/gravitational/teleportpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/teleport&distro=openSUSE%20Tumbleweed
>= 17.0.0, < 17.5.2+ 2 more
- (no CPE)range: >= 17.0.0, < 17.5.2
- (no CPE)range: < 0.0.20250730T213748-1.1
- (no CPE)range: < 17.5.3-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.