Vulnerability · Published Oct 28, 2025 · Assigned by GitHub_M
CVE-2025-27093Sliver does not restricted traffic between Wireguard clients.
Medium 6.3
In plain English
A medium-severity improper access control in sliver from BishopFox. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be accessible from other implants.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/BishopFox/sliver | 1.5.44 | GHSA-q8j9-34qf-7vq7 |
| Go | github.com/bishopfox/sliver | 1.5.44 | GHSA-q8j9-34qf-7vq7 |
| Go | github.com/bishopfox/sliver | 1.5.44 | GO-2025-4079 |
Affected products (as reported)
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L