CVE-2025-49825

Description

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.

Reserved 2025-06-11 | Published 2025-06-17 | Updated 2025-06-17 | Assigner GitHub_M

Problem types

CWE-863: Incorrect Authorization

Product status

<= 17.5.1
affected

<= 0.0.0-20250616162021-79b2f26125a1
affected

References

github.com/...leport/security/advisories/GHSA-8cqv-pj7f-pwpc

cve.org (CVE-2025-49825)

nvd.nist.gov (CVE-2025-49825)

Download JSON