CVE-2025-27093
Medium · 6.3CVSS
6.3
EPSS
0.3%
Published
Oct 28, 2025
CISA due date
—
The record
Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be accessible from other implants.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/BishopFox/sliver | 0 | 1.5.44 |
| Go | github.com/bishopfox/sliver | 0 | 1.5.44 |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0 | 0.0.20251105T184115-1.1 |
Related vulnerabilities
- GO-2025-4079 Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver Same vulnerability
- GO-2026-4548 Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in… Also affects github.com/bishopfox/sliver
- GO-2026-4445 Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in… Also affects github.com/bishopfox/sliver
- GO-2026-4466 Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of… Also affects github.com/bishopfox/sliver
- CVE-2026-25791 Sliver is a command and control framework that uses a custom Wireguard netstack. Also affects github.com/bishopfox/sliver
- CVE-2026-25760 Sliver is a command and control framework that uses a custom Wireguard netstack. Also affects github.com/bishopfox/sliver
- GO-2026-4280 Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in… Also affects github.com/bishopfox/sliver
- CVE-2025-61141 sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because… Also affects govulncheck-vulndb