PT-2025-25604 · Teleport · Teleport

Published 2025-06-16 · Updated 2026-03-31 · CVE-2025-49825

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Teleport versions prior to 17.5.2 Teleport versions 17.0.0 through 17.5.1 Teleport versions 16.0.0 through 16.5.11 Teleport versions 15.0.0 through 15.5.2 Teleport versions 14.0.0 through 14.4.0 Teleport versions 13.0.0 through 13.4.26 Teleport versions 12.4.34 and earlier

Description Teleport provides connectivity, authentication, access controls, and audit for infrastructure. A critical vulnerability allows remote attackers to bypass SSH authentication, potentially gaining unauthorized access to systems. The vulnerability affects Teleport Proxy and agent versions. While Teleport Cloud Infrastructure and CI/CD build systems are not affected, self-hosted agents require immediate patching. There is currently no evidence of exploitation in real-world scenarios.

Recommendations Upgrade to Teleport version 17.5.2 or later. Upgrade to Teleport version 16.5.12 or later. Upgrade to Teleport version 15.5.3 or later. Upgrade to Teleport version 14.4.1 or later. Upgrade to Teleport version 13.4.27 or later. Upgrade to Teleport version 12.4.35 or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-14380

CVE-2025-49825

GHSA-8CQV-PJ7F-PWPC

GO-2025-3763

OPENSUSE-SU-2025:15300-1

OPENSUSE-SU-2025:15405-1

Affected Products

Teleport

References · 91

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49825.json · Exploit
• https://bdu.fstec.ru/vul/2025-14380 · Security Note
• https://osv.dev/vulnerability/GO-2025-3763 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15405-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49825 · Security Note
• https://osv.dev/vulnerability/GHSA-8cqv-pj7f-pwpc · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15300-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49825 · Vendor Advisory
• https://github.com/gravitational/teleport · Note
• https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc · Note
• https://suse.com/security/cve/CVE-2025-52996 · Note
• https://suse.com/security/cve/CVE-2025-4922 · Note
• https://suse.com/security/cve/CVE-2025-3227 · Note
• https://suse.com/security/cve/CVE-2025-6227 · Note
• https://suse.com/security/cve/CVE-2025-52997 · Note