--- title: Teleport Audit Report is Available | daily.dev description: Teleport announces the results of a second full security audit conducted by Cure53, covering version 2.6. The audit found no critical vulnerabilities, one... canonical: https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teleport Audit Report is Available | daily.dev og:description: Teleport announces the results of a second full security audit conducted by Cure53, covering version 2.6. The audit found no critical vulnerabilities, one... og:url: https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o og:image: https://api.daily.dev/og/posts/0AAo4gh5O.png og:image:alt: Teleport Audit Report is Available og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teleport Audit Report is Available **[Teleport](https://daily.dev/sources/teleport)** · 3 min read · 0 upvotes · 0 comments ## Summary Teleport announces the results of a second full security audit conducted by Cure53, covering version 2.6. The audit found no critical vulnerabilities, one high-severity issue (directory traversal in the auth server's roles API), two medium issues, and two informational findings. All issues have already been patched in the 2.6.0 release, with backports provided for the 2.5.x and 2.4.x series (2.5.8 and 2.4.8). Cure53's conclusions were described as very positive, noting few findings compared to the previous audit. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What vulnerabilities did the Cure53 audit find in Teleport 2.6? The audit found one high-severity vulnerability where the roles API of the auth server allowed directory traversal, plus two medium-severity issues and two informational-level issues. No critical vulnerabilities were discovered. All five issues were already patched in the Teleport 2.6.0 release by the time findings were published. _Track security audit disclosures for infrastructure tools like Teleport on daily.dev before rolling out upgrades._ ### Which Teleport versions received patches for the Cure53 2.6 audit findings? Patches for the issues found in the Cure53 audit of Teleport 2.6 were backported and released as versions 2.5.8 and 2.4.8, covering the 2.5.x and 2.4.x release series, in addition to being fixed in the 2.6.0 release itself. _Developers pinning Teleport versions can follow patch backports like this on daily.dev._ ## Similar posts on daily.dev - [Obsidian Sync audits by Cure53 and Trail of Bits](https://daily.dev/posts/obsidian-sync-audits-by-cure53-and-trail-of-bits-lpcn9ysmx) · Obsidian Blog · 1 upvotes · 0 comments - [Teleport Report Finds Over-Privileged AI Systems Linked to Fourfold Rise in Security Incidents](https://daily.dev/posts/teleport-report-finds-over-privileged-ai-systems-linked-to-fourfold-rise-in-security-incidents-xrwm3gkxl) · InfoQ · 0 upvotes · 0 comments - [Report URI Penetration Test 2025](https://daily.dev/posts/report-uri-penetration-test-2025-h799c6hpy) · Scott Helme · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teleport Audit Report is Available","url":"https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o"},"datePublished":"2026-08-23T12:23:26.656Z","dateModified":"2026-08-23T12:53:03.285Z","description":"Teleport announces the results of a second full security audit conducted by Cure53, covering version 2.6. The audit found no critical vulnerabilities, one...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Teleport Audit Report is Available"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teleport-audit-report-is-available-0aao4gh5o#faq","mainEntity":[{"@type":"Question","name":"What vulnerabilities did the Cure53 audit find in Teleport 2.6?","acceptedAnswer":{"@type":"Answer","text":"The audit found one high-severity vulnerability where the roles API of the auth server allowed directory traversal, plus two medium-severity issues and two informational-level issues. No critical vulnerabilities were discovered. All five issues were already patched in the Teleport 2.6.0 release by the time findings were published. Track security audit disclosures for infrastructure tools like Teleport on daily.dev before rolling out upgrades."}},{"@type":"Question","name":"Which Teleport versions received patches for the Cure53 2.6 audit findings?","acceptedAnswer":{"@type":"Answer","text":"Patches for the issues found in the Cure53 audit of Teleport 2.6 were backported and released as versions 2.5.8 and 2.4.8, covering the 2.5.x and 2.4.x release series, in addition to being fixed in the 2.6.0 release itself. Developers pinning Teleport versions can follow patch backports like this on daily.dev."}}]} ```