Executive brief
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
Affected products
- Go github.com/bishopfox/sliver
Junglewise Threat Intelligence
CVE-2026-25760: GO-2026-4445 - Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
CVE-2026-25760 · Severity: low · CVSS 3.1 · Published 2026-02-17
Technologies: github.com/bishopfox/sliver (Go). Vendors: Go.
Related threats
- GO-2026-4899 - Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopf
- BishopFox Sliver unauthenticated remote access in MCP interface
- Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- GO-2026-4723 - Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
- GO-2026-4609 - Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver