We investigated the impact of CVE-2026-111943 and prepared updated releases of Teleport (18.11.6 and 17.7.31). These releases were built with a patched Go version protected against CVE-2026-111943.
While this vulnerability does not directly affect the Teleport CA, Teleport relies on TLS/HTTPS for intercomponent communication and integration with external services like SSO, leaving those integration points potentially vulnerable.
We encourage self-hosted customers to update all Teleport components (agents and client tools) to a patched version as soon as possible.
For the latest updates on this and our Teleport Cloud rollout, see status.teleport.sh | Teleport Security Response - CVE-2026-111943
Comments
0 comments
Article is closed for comments.