A critical security vulnerability in the open source platform Teleport allows remote attackers to bypass authentication and gain unauthorized system access. Teleport has released patches for affected versions, emphasizing the importance of updating self-hosted agents immediately. #TeleportCVE2025-49825 #SSHAuthenticationBreach
Keypoints
- A critical flaw (CVE-2025-49825) in Teleport can be exploited to bypass SSH authentication controls.
- The vulnerability affects Teleport Community Edition versions up to 17.5.1 and requires immediate patching.
- Automated updates have been applied for cloud customers, but self-hosted agents must be manually updated.
- Impacted systems include Teleport SSH agents, OpenSSH deployments, and Teleport Git proxies.
- No public exploits or in-the-wild attacks have been reported as of now, but prompt action is advised.
Read More: https://www.securityweek.com/critical-authentication-bypass-flaw-patched-in-teleport/