CVE-2025-27090 MEDIUM

CVE-2025-27090: Server-Side Request Forgery (SSRF) in sliver teamserver

Vendor Bishopfox
Product sliver
Weakness CWE-918 · SSRF
Published February 19, 2025
Last update February 19, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so. The only impact that has been shown is the exposure of the server's IP address to a third party. This issue has been addressed in version 1.5.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Key dates

02Disclosure timeline

February 19, 2025 CVE published
February 19, 2025 Record updated

Related vulnerabilities

04Related CVE