CVE-2022-38599: Goteleport Teleport

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.

Affected products

• Goteleport Teleport: version 3.2.2 only; version 3.5.6 only; version 3.6.3 only

Published 2022-12-08. Last modified 2026-07-09.