CVE-2025-49825

Teleport allows remote authentication bypass

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.

Affected

gravitational · teleport

CVSS v3.1 GITHUB

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

7.92% chance of exploitation in the next 30 days, 95th percentile

Nuclei

critical

Published

2025-06-17

Updated

2025-06-18

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49825.yaml

Security advisories

• advisories/GHSA-8cqv-pj7f-pwpc

References

• CVE Record
• NVD entry