Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2025-49825
CVE-2025-49825:
Teleport vulnerability analysis and mitigation
Overview
A critical security vulnerability (CVE-2024-49825) was identified in Teleport that could allow remote authentication bypass. The vulnerability was discovered by Teleport security engineers and disclosed on June 16, 2025. The affected versions include Teleport versions 17.0.0-17.5.2, 16.0.0-16.5.12, 15.0.0-15.5.3, 14.0.0-14.4.1, 13.0.0-13.4.27, and versions prior to 12.4.35 (GitHub Advisory).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (Critical) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability can be exploited remotely with low attack complexity, requires no privileges or user interaction, and can result in high impacts to confidentiality, integrity, and availability. The vulnerability is associated with CWE-863 (GitHub Advisory).
Impact
The vulnerability could allow unauthorized remote authentication bypass of Teleport systems. While Teleport Cloud Infrastructure and CI/CD build, test, and release infrastructure are not affected, the vulnerability poses a significant risk to other Teleport deployments (GitHub Advisory).
Mitigation and workarounds
Patched versions have been released: 17.5.2, 16.5.12, 15.5.3, 14.4.1, 13.4.27, and 12.4.35. These versions are designated as Critical Security Exception Versions, with Community Edition restrictions on employee count and revenue thresholds temporarily removed if patches are applied within 30 days of release. Both Proxy and Teleport agents must be upgraded for full mitigation (GitHub Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management