Threats tagged 'ghsa-q8j9-34qf-7vq7'

Sliver's custom Wireguard implementation does not restrict traffic between Wireguard clients, allowing unrestricted communication. This design flaw can lead to keypair leakage and unauthorized access to operator services. An attacker who recovers a beacon's Wireguard private key can connect to the Wireguard listener and create new clients, potentially maintaining persistence within the network. The vulnerability affects all Sliver versions with Wireguard functionality prior to 1.5.44.