Executive brief
Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
Affected products
- Go github.com/bishopfox/sliver
Junglewise Threat Intelligence
CVE-2024-41111: GO-2024-2993 - Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
CVE-2024-41111 · Severity: low · CVSS 3.1 · Published 2024-07-22
Technologies: github.com/bishopfox/sliver (Go). Vendors: Go.
Related threats
- GO-2026-4899 - Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopf
- BishopFox Sliver unauthenticated remote access in MCP interface
- Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- GO-2026-4723 - Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
- GO-2026-4609 - Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver