← All advisories

Medium severity4.9OSV Advisory· Published Oct 23, 2025· Updated Apr 15, 2026

CVE-2025-62820

CVE-2025-62820

Description

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/slackhq/nebulaGo	>= 1.9.4, < 1.9.7	1.9.7

Affected products

22

Slackhq/NebulaOSV
Range: v1.0.0, v1.1.0, v1.2.0, …
osv-coords21 versions
pkg:apk/chainguard/caddy pkg:apk/chainguard/caddy-fips pkg:apk/chainguard/caddy-man pkg:apk/chainguard/caddy-src pkg:apk/chainguard/step pkg:apk/chainguard/step-ca pkg:apk/chainguard/step-ca-fips pkg:apk/chainguard/step-fips pkg:apk/chainguard/step-issuer pkg:apk/chainguard/step-issuer-compat pkg:apk/chainguard/step-issuer-fips pkg:apk/chainguard/step-issuer-fips-compat pkg:apk/wolfi/caddy pkg:apk/wolfi/caddy-man pkg:apk/wolfi/caddy-src pkg:apk/wolfi/step pkg:apk/wolfi/step-ca pkg:apk/wolfi/step-issuer pkg:apk/wolfi/step-issuer-compat pkg:golang/github.com/slackhq/nebula pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 2.10.2-r3+ 20 more
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 2.10.2-r2
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 0.28.7-r4
- (no CPE)range: < 0.28.4-r3
- (no CPE)range: < 0.28.4-r4
- (no CPE)range: < 0.28.7-r4
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 2.10.2-r3
- (no CPE)range: < 0.28.7-r4
- (no CPE)range: < 0.28.4-r3
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: < 0.9.9-r3
- (no CPE)range: >= 1.9.4, < 1.9.7
- (no CPE)range: < 0.0.20251105T184115-1.1

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-x6fh-7qmf-69xhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-62820ghsaADVISORY
github.com/slackhq/nebula/commit/e264a0ff888c7bf0568579306755a60fc42f6eccghsaWEB
github.com/slackhq/nebula/pull/1493nvdWEB
github.com/slackhq/nebula/pull/1494nvdWEB

News mentions

0

No linked articles in our index yet.