Starstruk Logo MarkStarstruk

v17.7.13

gravitational/teleportv17.7.13Jan 8, 2026by fheinecke

AI Summary

Feature-rich release with multiple bug fixes, security patches including CVE-2025-64702, and various UI improvements. Addresses memory leaks and Azure SSRF vulnerability.

Key Highlights

  • Fixed Device Trust losing redirect URL query params
  • Fixed Teleport Connect notification spam
  • Added IAM joining support from new AWS Asia regions
  • Fixed Azure join method SSRF vulnerability (security fix)
  • Updated quic-go to 0.57.0 for CVE-2025-64702
  • Fixed memory leak in access list reminder notifications
  • Added Workload Identities page to web UI

New Features

  • Security vulnerability fixes
  • AWS region expansion
  • Web UI improvements
  • Memory leak fixes

Full Release Notes

## Description

* Fixed an issue where logging in to the Web UI with Device Trust would lose query params of the redirect URL. [#62678](https://github.com/gravitational/teleport/pull/62678)
* Fixed an issue where Teleport Connect could generate a flurry of notifications about not being able to connect to a resource. [#62672](https://github.com/gravitational/teleport/pull/62672)
* Fixed issuance of wildcard DNS SANs with Workload Identity. [#62669](https://github.com/gravitational/teleport/pull/62669)
* Added IAM joining support from new AWS regions in asia. [#62628](https://github.com/gravitational/teleport/pull/62628)
* Added cleanup of access entries for EKS auto-discovered clusters when they no longer match the filtering criteria and are removed. [#62599](https://github.com/gravitational/teleport/pull/62599)
* Fixed some auto update audit events showing up as unknown in the web UI. [#62548](https://github.com/gravitational/teleport/pull/62548)
* The join tokens UI now indicates which tokens are managed by the Teleport Cloud platform. [#62543](https://github.com/gravitational/teleport/pull/62543)
* Audit log and session uploader now respect region field of external_audit_storage resource when present. [#62519](https://github.com/gravitational/teleport/pull/62519)
* Fixed an issue that prevented searching for users by role in the web UI. [#62475](https://github.com/gravitational/teleport/pull/62475)
* Acknowledging a cluster alert no longer requires the create permission. [#62469](https://github.com/gravitational/teleport/pull/62469)
* Fixed tilde expansion for moderated SFTP. [#62454](https://github.com/gravitational/teleport/pull/62454)
* Fixed a potential SSRF vulnerability in the Azure join method implementation. [#62420](https://github.com/gravitational/teleport/pull/62420)
* Updated github.com/quic-go/quic-go to 0.57.0 to mitigate CVE-2025-64702. [#62294](https://github.com/gravitational/teleport/pull/62294)
* Fixed issue where AltGr key combinations did not work correctly in remote desktop sessions. [#62197](https://github.com/gravitational/teleport/pull/62197)
* Fixed a memory leak in access list reminder notifications affecting clusters with more than 1000 pending Access List reviews. [#62664](https://github.com/gravitational/teleport/pull/62664)

## Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

## Plugins

Download the current release of Teleport plugins from the links below.
* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.13-linux-arm64-bin.tar.gz) 
* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.13-linux-arm64-bin.tar.gz)
* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.13-linux-arm64-bin.tar.gz)
* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.13-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.13-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.13-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.13-darwin-universal-bin.tar.gz)
* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.13-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.13-darwin-amd64-bin.tar.gz)
* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.13-linux-arm64-bin.tar.gz)
* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.13-linux-arm64-bin.tar.gz)
* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.13-linux-arm64-bin.tar.gz)
* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.13-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.13-linux-arm64-bin.tar.gz)