CVE-2025-49825

Published Jun 17, 2025

Last updated 8 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-49825 is a remote authentication bypass vulnerability identified in Teleport Community Edition versions up to and including 17.5.1. Teleport is a platform designed to provide connectivity, authentication, access controls, and auditing capabilities for infrastructure. This flaw allows attackers to circumvent the authentication process remotely, without requiring any prior privileges or user interaction. The vulnerability is categorized under CWE-863 (Incorrect Authorization), indicating an issue within the authorization logic that could enable unauthorized access to protected resources. Exploitation of CVE-2025-49825 could grant attackers unauthorized entry to critical systems and infrastructure components managed by Teleport. Teleport has released patches for affected versions, including 17.5.2, 16.5.12, 15.5.3, 14.4.1, 13.4.27, and 12.4.35.

Description: Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.
Source: security-advisories@github.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-863

Hype score: Not currently trending

References