Withdrawn Advisory: User-provided environment values allow execution on macOS agents
Date: 2024-01
Affected: go/github.com/gravitational/teleport, go/github.com/gravitational/teleport, go/github.com/gravitational/teleport
Attack vector: rce
Category: vulnerability-disclosure
Severity: High

## Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a [supported ecosystem](https://github.com/github/advisory-database#supported-ecosystems). Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. ## Original Description ### Impact Agents running on macOS could be susceptible to unexpected code execution through user supplied environment variables. ### Patches Fixed in versions 14.2.4, 13.4.13 and 12.4.31. ### References * Fix PR: https://github.com/gravitational/teleport/pull/36132


Mitigations:

Architectural layers (MAESTRO):