CVE-2026-29781 - Vulnerability Analysis

Overview

Sliver 1.7.3 and prior contains a denial of service caused by lack of nil-pointer validation in Protobuf unmarshalling logic in the C2 server, letting authenticated actors trigger a global process termination, exploit requires post-authentication access.

Severity & Score

Impact

Authenticated attackers can cause a global process termination, disrupting all active sessions and requiring manual server restart.

Mitigation

Update to the latest version once patches are available.

References

• https://github.com/BishopFox/sliver/security/advisories/GHSA-hx52-cv84-jr5v

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner