CVE-2026-25760
published 2026-02-06CVE-2026-25760: Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an…
PriorityP344medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.48%
38.6th percentile
Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path traversal / arbitrary file read issue, and it can expose credentials, configs, and keys. This vulnerability is fixed in 1.6.11.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bishopfox | sliver | < 1.6.11 | 1.6.11 |
| github.com | bishopfox_sliver | >= 0 < 1.6.11 | 1.6.11 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
osv·2026-02-17
CVE-2026-25760 Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
OSV
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
osv·2026-02-05
CVE-2026-25760 [MEDIUM] Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
## Summary
A Path Traversal vulnerability in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated **Path Traversal / arbitrary file read** issue, and it can expose credentials, configs, and keys.
## Affected Component
- Website content management (gRPC): `WebsiteAddContent`, `Website`, `Websites`
- Server-side file read in `Website.ToProtobuf`
## Impact
- **Arbitrary file read** as the Sliver server OS user.
- Exposure of sensitive data such as operator configs, TLS keys, tokens, and logs.
## Root Cause
The server accepts and persists arbitrary website paths from the operator, then later reads from disk using that path withou
GHSA
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
ghsa·2026-02-05
CVE-2026-25760 [MEDIUM] CWE-22 Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
## Summary
A Path Traversal vulnerability in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated **Path Traversal / arbitrary file read** issue, and it can expose credentials, configs, and keys.
## Affected Component
- Website content management (gRPC): `WebsiteAddContent`, `Website`, `Websites`
- Server-side file read in `Website.ToProtobuf`
## Impact
- **Arbitrary file read** as the Sliver server OS user.
- Exposure of sensitive data such as operator configs, TLS keys, tokens, and logs.
## Root Cause
The server accepts and persists arbitrary website paths from the operator, then later reads from disk using that path withou
No detection rules found.
No public exploits indexed.
2026-02-06
Published