CVE-2026-34227 - Vulnerability Analysis

Overview

Sliver < 1.7.4 contains a remote code execution caused by a malicious link in the custom Wireguard netstack, letting unauthenticated attackers gain silent control over active C2 sessions, exploit requires victim to click a malicious link.

Severity & Score

Impact

Unauthenticated attackers can silently control all active C2 sessions, exfiltrate sensitive data, or destroy compromised infrastructure via the operator's browser.

Mitigation

Update to version 1.7.4 or later.

References

• https://github.com/BishopFox/sliver/security/advisories/GHSA-6fpf-248c-m7wm

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner