PT-2025-43432 · Slack · Slack Nebula

Published 2025-10-23 · Updated 2026-04-01 · CVE-2025-62820

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Slack Nebula versions prior to 1.9.7

Description Slack Nebula, in some configurations, does not properly handle CIDR (Classless Inter-Domain Routing) notation. This allows for the acceptance of arbitrary source IP addresses within the Nebula network.

Recommendations Update to version 1.9.7 or later.

Fix

Weakness Enumeration

CWE-420

Related Identifiers

CLEANSTART-2026-CE02533

CLEANSTART-2026-CV29689

CLEANSTART-2026-KC01126

CLEANSTART-2026-KV78041

CLEANSTART-2026-MI26039

CLEANSTART-2026-OL60454

CLEANSTART-2026-UZ79996

CVE-2025-62820

GHSA-X6FH-7QMF-69XH

GO-2025-4068

OPENSUSE-SU-2025:15710-1

Affected Products

Slack Nebula

References · 139

• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58187 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913 · Security Note
• https://osv.dev/vulnerability/GO-2025-4068 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62820 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-CE02533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44005 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58189 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62820 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58183 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-30836 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-UZ79996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61724 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61727 · Security Note