CVE-2025-27090

Summary

CVE-2025-27090 is a vulnerability affecting Sliver, an open-source cross-platform adversary emulation/red team framework. The issue lies in the reverse port forwarding functionality of the Sliver teamserver. An implant can open a reverse tunnel on the server without the operator's permission, exposing the server's IP address to potential third-party access. This vulnerability has been addressed in version 1.5.43, and users are strongly encouraged to upgrade. Currently, there are no known workarounds for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.