CVE-2025-27093

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be accessible from other implants.

• CWE-284

• https://github.com/BishopFox/sliver/commit/8e5c5f14506d6d60ebb3362e6b9857ab1e0d76ff
• https://github.com/BishopFox/sliver/commit/9122878cbbcae543eb8210f616550382af2065fd
• https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7
• https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7

Published

Oct 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27088oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In aff…8.2
• CVE-2025-27089Directus is a real-time API and App dashboard for managing S…4.3
• CVE-2025-2709A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 an…6.1
• CVE-2025-27090Sliver is an open source cross-platform adversary emulation/…5.3
• CVE-2025-27091OpenH264 is a free license codec library which supports H.26…7.5
• CVE-2025-27092GHOSTS is an open source user simulation framework for cyber…7.5
• CVE-2025-27094Tuleap is an open-source suite designed to improve software …5.4
• CVE-2025-27095JumpServer is an open source bastion host and an operation a…4.3
• CVE-2025-27096WeGIA is a Web Manager for Institutions with a focus on Port…9.8
• CVE-2025-27097GraphQL Mesh is a GraphQL Federation framework and gateway f…7.5
• CVE-2025-27098GraphQL Mesh is a GraphQL Federation framework and gateway f…7.5
• CVE-2025-27099Tuleap is an Open Source Suite to improve management of soft…4.8