Authenticated Path Traversal in Sliver Command and Control Framework by BishopFox
CVE-2026-25760

6.5MEDIUM

Key Information:

Vendor

Bishopfox
Status
Sliver
Vendor
CVE Published:
6 February 2026

What is CVE-2026-25760?

The Sliver command and control framework, developed by BishopFox, contains a vulnerability that permits authenticated users to perform path traversal. This issue allows attackers to read arbitrary files located on the Sliver server host, revealing sensitive information such as credentials, configurations, and encryption keys. The vulnerability affects all versions prior to 1.6.11 and has been mitigated in subsequent updates.

Affected Version(s)

sliver < 1.6.11

References

https://github.com/BishopFox/sliver/security/advisories/G...
x_refsource_CONFIRM
https://github.com/BishopFox/sliver/commit/818127349ccec8...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.