CVE-2026-32941 - Vulnerability Analysis

Overview

Sliver <= 1.7.3 contains a remote out-of-memory vulnerability caused by trusting attacker-controlled length prefixes in mTLS and WireGuard transport layers, letting attackers with valid credentials crash the server via memory exhaustion, exploit requires valid credentials.

Severity & Score

Impact

Attackers with valid credentials can crash the server causing denial of service and disruption of implant sessions.

Mitigation

Update to the latest version once a fix is available.

References

• https://github.com/BishopFox/sliver/security/advisories/GHSA-97vp-pwqj-46qc

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner