teleport

v17.7.25 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

audit bastion certificate cluster database-access firewall

+13 more

firewalls go jumpserver kubernetes kubernetes-access pam postgresql rbac rdp security ssh teleport teleport-binaries

Affected surfaces

auth deps

Summary

AI summary

Updates Description, https://github.com/gravitational/teleport/pull/67446, and https://github.com/gravitational/teleport/pull/67443 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Dependency	Low	Updated Go runtime to version 1.25.11. Updated Go runtime to version 1.25.11. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix
Bugfix	Low	Prevented SSH users from canceling other users' remote port forwards. Prevented SSH users from canceling other users' remote port forwards. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Low	Fixed "error gathering metrics" log spam. Fixed "error gathering metrics" log spam. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Low	Fixed minor formatting bug on `tsh request show` output. Fixed minor formatting bug on `tsh request show` output. Source: llm_adapter@2026-06-09 Confidence: high	—

Full changelog

Description

Fixed minor formatting bug on tsh request show output. #67446
Prevented ssh users from being able to cancel other users' remote port forwards. #67443
Updated Go to 1.25.11. #67422
Fixed "error gathering metrics" log spam. #67352

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Slack Linux amd64 | Linux arm64
Mattermost Linux amd64 | Linux arm64
Discord Linux amd64 | Linux arm64
Terraform Provider Linux amd64 | Linux arm64 | macOS amd64 | macOS arm64 | macOS universal
Event Handler Linux amd64 | Linux arm64 | macOS amd64
PagerDuty Linux amd64 | Linux arm64
Jira Linux amd64 | Linux arm64
Email Linux amd64 | Linux arm64
Microsoft Teams Linux amd64 | Linux arm64

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track teleport

Get notified when new releases ship.

About teleport

The easiest, and most secure way to access and protect all of your infrastructure.

All releases →

Related context

Related tools

Earlier breaking changes

v18.10.0 Kubernetes ephemeral container addition now requires both exec and patch/update verbs.
v18.8.3 Embedded session helper disabled by default; enable via `TELEPORT_UNSTABLE_DISABLE_EMBEDDED_REEXEC=no`.
v18.8.0 Roles with unknown fields rejected at create/edit instead of silently dropped.
v18.8.0 Teleport Connect automatic updates only; manual downgrades required.