Executive brief
SSRF in sliver teamserver in github.com/bishopfox/sliver
Affected products
- Go github.com/bishopfox/sliver
Junglewise Threat Intelligence
CVE-2025-27090: GO-2025-3472 - SSRF in sliver teamserver in github.com/bishopfox/sliver
CVE-2025-27090 · Severity: medium · CVSS 4 · Published 2025-03-03
Technologies: github.com/bishopfox/sliver (Go). Vendors: Go.
Related threats
- GO-2026-4899 - Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopf
- BishopFox Sliver unauthenticated remote access in MCP interface
- Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- GO-2026-4723 - Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
- GO-2026-4609 - Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver