{"cve":"CVE-2025-27093","nvd":{"published":"2025-10-28T20:15:47.897","modified":"2026-10-08T11:10:00.250","status":"Deferred","description":"Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be accessible from other implants.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","score":6.3},"cwes":["CWE-284"],"references":["https://github.com/BishopFox/sliver/commit/8e5c5f14506d6d60ebb3362e6b9857ab1e0d76ff","https://github.com/BishopFox/sliver/commit/9122878cbbcae543eb8210f616550382af2065fd","https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7","https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:14:53.307938015+00:00"},"epss":{"cve":"CVE-2025-27093","score":0.00288,"percentile":0.21204,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-q8j9-34qf-7vq7","url":"https://osv.dev/vulnerability/GHSA-q8j9-34qf-7vq7","summary":"Silver has unrestricted traffic between Wireguard clients","modified":"2025-11-05T22:05:52Z","packages":[{"ecosystem":"Go","name":"github.com/BishopFox/sliver","purl":"pkg:golang/github.com/BishopFox/sliver","ranges":["<1.5.44"],"fixed":["1.5.44"]},{"ecosystem":"Go","name":"github.com/bishopfox/sliver","purl":"pkg:golang/github.com/bishopfox/sliver","ranges":["<1.5.44"],"fixed":["1.5.44"]}]},{"id":"GO-2025-4079","url":"https://osv.dev/vulnerability/GO-2025-4079","summary":"Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver","modified":"2026-03-03T04:57:31.235601Z","packages":[{"ecosystem":"Go","name":"github.com/bishopfox/sliver","purl":"pkg:golang/github.com/bishopfox/sliver","ranges":["<1.5.44"],"fixed":["1.5.44"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}