Traffic Control Vulnerability in Sliver Command Control Framework by BishopFox

CVE-2025-27093

What is CVE-2025-27093?

The Sliver command and control framework, developed by BishopFox, has a traffic control vulnerability in its Wireguard netstack. In versions 1.5.43 and earlier, as well as in the development version 1.6.0-dev, there is an absence of traffic restrictions between Wireguard clients. This lack of traffic control can potentially lead to unauthorized communication between clients, which may result in leaked or compromised keypairs being exploited. Furthermore, it allows for port forwardings to be accessible by other implants, enhancing the risk for operators and increasing the attack surface.

References