teleport

v18.10.0 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 18d Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 3 known CVEs

Topics

audit bastion certificate cluster database-access firewall

+13 more

firewalls go jumpserver kubernetes kubernetes-access pam postgresql rbac rdp security ssh teleport teleport-binaries

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 10d

The Slack plugin no longer exposes credentials in request URLs; Kubernetes ephemeral containers now require both exec and patch/update RBAC verbs.

Why it matters: Fixes credential leakage in Slack integrations (severity 80) and mandates updated RBAC for ephemeral containers (severity 70), affecting deployments using these features.

Summary

AI summary

Broad release touches Other fixes and improvements, Description, https://github.com/gravitational/teleport/pull/67607, and https://github.com/gravitational/teleport/pull/68337.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Fixes Slack plugin exposing credentials in request URLs. Fixes Slack plugin exposing credentials in request URLs. Source: llm_adapter@2026-07-16 Confidence: high	—
Breaking	High	Kubernetes ephemeral container addition now requires both exec and patch/update verbs. Kubernetes ephemeral container addition now requires both exec and patch/update verbs. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature
Feature	Medium	Adds sharing of multiple directories in a single Windows RDP session. Adds sharing of multiple directories in a single Windows RDP session. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds ability to unmount shared directories without terminating the RDP session. Adds ability to unmount shared directories without terminating the RDP session. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds AI summarization for Windows desktop access session recordings. Adds AI summarization for Windows desktop access session recordings. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds "tsh apps logins" command to query available logins for cloud applications (AWS supported). Adds "tsh apps logins" command to query available logins for cloud applications (AWS supported). Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Kubernetes RBAC honors wildcard (``) verb regardless of position in `verbs` list, including via trait templating. Kubernetes RBAC honors wildcard (``) verb regardless of position in `verbs` list, including via trait templating. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Introduces Sub CA `tctl auth update-override` and `delete-override` commands as user‑friendly alternatives. Introduces Sub CA `tctl auth update-override` and `delete-override` commands as user‑friendly alternatives. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Dependency	Low	Updates dependencies addressing GO-2026-5547 and GO-2026-5694. Updates dependencies addressing GO-2026-5547 and GO-2026-5694. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes repeated MFA prompts for admin actions when SSO is the only second factor. Fixes repeated MFA prompts for admin actions when SSO is the only second factor. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes MFA prompts to show correct --mfa-mode values for WebAuthn authenticators. Fixes MFA prompts to show correct --mfa-mode values for WebAuthn authenticators. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes HTTP application access returning repeated 403 errors after certificate renewal. Fixes HTTP application access returning repeated 403 errors after certificate renewal. Source: llm_adapter@2026-07-16 Confidence: low	—
Bugfix	Medium	Resolves connectivity issues with Redshift database through the MCP. Resolves connectivity issues with Redshift database through the MCP. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Prevents repeated 403 errors after certificate renewal by closing the connection and forcing re‑establishment with a renewed certificate. Prevents repeated 403 errors after certificate renewal by closing the connection and forcing re‑establishment with a renewed certificate. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Improves Azure VM auto‑discovery and enrollment rate. Improves Azure VM auto‑discovery and enrollment rate. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Prevents misrouting when multiple apps share the same public address. Prevents misrouting when multiple apps share the same public address. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—

Full changelog

Description

Directory sharing enhancements for Windows desktop access

Teleport now supports sharing multiple directories in a single RDP session. In
addition, users will be able to unmount shared directories without terminating
the session.

Windows sessions summaries

Identity Security now supports AI summarization for Windows desktop access
session recordings.

Other fixes and improvements

Resolve connectivity issues with the Redshift database through the MCP. #68337
Updated dependencies (addresses GO-2026-5547 and GO-2026-5694). #68152
Kubernetes resource RBAC now honors a wildcard (*) verb regardless of its position in the verbs list, including when introduced via trait templating. #68143
Added the Sub CA tctl auth update-override command, a user-friendly alternative over tctl create -f or tctl edit ca_overrides. #68189
Kubernetes: adding an ephemeral container to a pod (pods/ephemeralcontainers) now requires both the exec and patch/update verbs in the same role's kubernetes_resources. Previously only patch/update was required. #68159
Invalid role expressions are now rejected at creation time. #67607
Reject wildcards in role.allow.request.search_as_roles and role.allow.review_requests.preview_as_roles at creation time. #67607
Add missing validation for role.allow.require_session_join and role.allow.join_sessions fields. #67607
Improved the rate of Azure VM auto-discovery and enrollment. #67941
Fixed cloud-hosted Slack plugin exposing credentials in request URLs. #68017
Fix an issue where the WebUI would prompt for MFA multiple times for admin actions (or outright fail for select commands) when sso is the only allowed second factor on the cluster. #67867
Prevent misrouting when multiple apps share the same public address. #67947
Fix MFA prompts to show correct --mfa-mode values for webauthn authenticators. #67971
Fixed HTTP application access connections returning repeated 403 errors after certificate renewal. When the certificate behind a long-lived connection expires, the proxy now sends Connection: close so the client reestablishes the connection with a renewed certificate instead of reusing a dead one. #68099
Add "tsh apps logins" command to query available logins for the given cloud application (currently only AWS is supported). #68052
Added the Sub CA tctl auth delete-override command, a user-friendly alternative over tctl edit ca_overrides or tctl rm ca_overrides. #68014

Enterprise:

Changed Sub CA RPCs to emit audit error events for all failures.
Fixed Access List review badge not appearing on the main page for users who are both an owner and a member of an Access List.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Slack Linux amd64 | Linux arm64
Mattermost Linux amd64 | Linux arm64
Discord Linux amd64 | Linux arm64
Terraform Provider Linux amd64 | Linux arm64 | macOS amd64 | macOS arm64 | macOS universal
Event Handler Linux amd64 | Linux arm64 | macOS amd64
PagerDuty Linux amd64 | Linux arm64
Jira Linux amd64 | Linux arm64
Email Linux amd64 | Linux arm64
Microsoft Teams Linux amd64 | Linux arm64

Security Fixes

dep: GO-2026-5547
dep: GO-2026-5694
Fixed cloud‑hosted Slack plugin exposing credentials in request URLs.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track teleport

Get notified when new releases ship.

About teleport

The easiest, and most secure way to access and protect all of your infrastructure.

All releases →

Related context

Related tools

Earlier breaking changes

v18.8.3 Embedded session helper disabled by default; enable via `TELEPORT_UNSTABLE_DISABLE_EMBEDDED_REEXEC=no`.
v18.8.0 Roles with unknown fields rejected at create/edit instead of silently dropped.
v18.8.0 Teleport Connect automatic updates only; manual downgrades required.