PT-2024-40475 · Teleport · Teleport

Published 2024-01-03 · Updated 2024-01-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Teleport versions prior to 12.4.31 Teleport versions prior to 13.4.13 Teleport versions prior to 14.2.4

Description The issue affects agents running on macOS, making them susceptible to unexpected code execution through user-supplied environment variables.

Recommendations For versions prior to 12.4.31, update to version 12.4.31 or later. For versions prior to 13.4.13, update to version 13.4.13 or later. For versions prior to 14.2.4, update to version 14.2.4 or later.

Related Identifiers

GHSA-VFXF-76HV-V4W4

Affected Products

Teleport

References · 5

• https://osv.dev/vulnerability/GHSA-vfxf-76hv-v4w4 · Vendor Advisory
• https://github.com/gravitational/teleport · Note
• https://github.com/gravitational/teleport/commit/fcc97de9f99dfec8696ecfd620672a26f29cf9ac · Note
• https://github.com/gravitational/teleport/pull/36132 · Note
• https://github.com/gravitational/teleport/security/advisories/GHSA-vfxf-76hv-v4w4 · Note