PT-2025-43432 · Slack · Slack Nebula

Publicado 2025-10-23 · Atualizado 2026-04-01 · CVE-2025-62820

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Slack Nebula versions prior to 1.9.7

Description Slack Nebula, in some configurations, does not properly handle CIDR (Classless Inter-Domain Routing) notation. This allows for the acceptance of arbitrary source IP addresses within the Nebula network.

Recommendations Update to version 1.9.7 or later.

Correção

Enumeração de Fraquezas

CWE-420

Identificadores relacionados

CLEANSTART-2026-CE02533

CLEANSTART-2026-CV29689

CLEANSTART-2026-KC01126

CLEANSTART-2026-KV78041

CLEANSTART-2026-MI26039

CLEANSTART-2026-OL60454

CLEANSTART-2026-UZ79996

CVE-2025-62820

GHSA-X6FH-7QMF-69XH

GO-2025-4068

OPENSUSE-SU-2025:15710-1

Produtos afetados

Slack Nebula

Referências · 139

• https://github.com/slackhq/nebula · Nota
• https://github.com/slackhq/nebula/commit/e264a0ff888c7bf0568579306755a60fc42f6ecc · Nota
• https://github.com/slackhq/nebula/pull/1494 · Nota
• https://github.com/slackhq/nebula/pull/1493 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OL60454.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KV78041.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UZ79996.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CE02533.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MI26039 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MI26039.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KV78041 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OL60454 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KC01126 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CV29689.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KC01126.json · Nota