User-provided environment values allow execution on macOS agents
Package
macOS Teleport Agent
Affected versions
>=14.0.0, <14.2.4
>=13.0.0, <13.4.13
<12.4.31
Patched versions
14.2.4
13.4.13
12.4.31
Impact
Agents running on macOS could be susceptible to unexpected code execution through user supplied environment variables.
Patches
Fixed in versions 14.2.4, 13.4.13 and 12.4.31.
References