{"cve":"CVE-2025-27090","nvd":{"published":"2025-02-19T22:15:24.247","modified":"2026-06-17T09:03:00.813","status":"Analyzed","description":"Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so. The only impact that has been shown is the exposure of the server's IP address to a third party. This issue has been addressed in version 1.5.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3},"cwes":["CWE-918"],"references":["https://github.com/BishopFox/sliver/commit/0f340a25cf3d496ed870dae7da39eab4427bc16f","https://github.com/BishopFox/sliver/commit/10e245326070c6a5884a02e0790bb7e2baefb3a1","https://github.com/BishopFox/sliver/security/advisories/GHSA-fh4v-v779-4g2w"],"products":["bishopfox:sliver"],"source":"nvd","synced_at":"2026-10-19T21:59:18.731010617+00:00"},"epss":{"cve":"CVE-2025-27090","score":0.00631,"percentile":0.50282,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-fh4v-v779-4g2w","url":"https://osv.dev/vulnerability/GHSA-fh4v-v779-4g2w","summary":"SSRF in sliver teamserver","modified":"2025-03-03T19:41:53.796812Z","packages":[{"ecosystem":"Go","name":"github.com/bishopfox/sliver","purl":"pkg:golang/github.com/bishopfox/sliver","ranges":[">=1.5.26 <1.5.43"],"fixed":["1.5.43"]}]},{"id":"GO-2025-3472","url":"https://osv.dev/vulnerability/GO-2025-3472","summary":"SSRF in sliver teamserver in github.com/bishopfox/sliver","modified":"2026-03-03T04:56:16.820353Z","packages":[{"ecosystem":"Go","name":"github.com/bishopfox/sliver","purl":"pkg:golang/github.com/bishopfox/sliver","ranges":[">=1.5.26 <1.5.43"],"fixed":["1.5.43"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}