teleport Releases

Teleport v18.1.2 is a patch release focused on bug fixes and minor improvements. Key fixes include resolving Windows SSH agent dysfunctionality after single connections, fixing the global --help flag usage print, and addressing CRL backfilling issues for long-standing clusters. New features include Cursor and VSCode install buttons in the MCP connect dialog, configurable shutdown delay, and improved tool visibility in tsh mcp ls.

Aug 5, 2025

Teleport v17.7.1 is a patch release focused on bug fixes and optimizations. Key fixes include resolving CRL backfilling issues for long-standing clusters, disabling NLA in FIPS mode for compliance, and improving the `--help` flag and `tctl top` command behavior.

Aug 1, 2025

Teleport v17.7.0 introduces Managed Updates v2 canary support for Linux agents, allowing gradual updates with health verification before full rollout. The release also includes YubiKey 5.7.4+ firmware support, fixes for tctl/tsh on read-only file systems, and various bug fixes for Teleport Connect, SCIM provisioning, and certificate revocation in AD environments.

Jul 30, 2025

Teleport v18.1.1 is a patch release focused on bug fixes and compatibility improvements. The release addresses issues with Active Directory Windows desktop access CRL publication, adds support for YubiKeys running firmware 5.7.4+ as PIV hardware keys, and fixes an Enterprise crash when using GitHub personal access tokens without expiration dates.

Jul 29, 2025

Teleport v16.5.14 is a patch release focused on bug fixes and minor improvements. Key fixes include web login second factor fallback, MacOS install script errors, and tbot SPIFFE SVID renewal issues. The release also adds a new `--listen` flag to `tsh proxy db` and updates Go to 1.23.11.

Jul 25, 2025

Teleport v18.1.0 introduces significant new capabilities including MCP server access with audit logging, VNet for SSH with native support, identifier-first login flows, and bound keypair joining for Machine ID. However, there is a critical warning: this release has a bug affecting Windows desktop access certificate revocation list publishing, and users are advised to skip to v18.1.1.

Jul 25, 2025

Teleport v17.6.0 introduces native SSH support for VNet, enabling any SSH client to connect to Teleport SSH servers with zero configuration and first-class per-session MFA support. This release also includes various bug fixes for install scripts, client tools managed updates, and Azure CLI compatibility.

Jul 23, 2025

This is a patch release (v17.5.5) for Teleport with a caution against upgrading due to an introduced breaking change. The release includes fixes for backward compatibility with Access Lists for older Terraform providers, VNet DNS configuration on Windows/Active Directory, and a Go update to 1.23.11. It also adds UI improvements for bot instance sorting and new Enterprise features for SCIM integration enrollment.

Jul 21, 2025

Teleport v18.0.1 is a patch release with bug fixes and new features, though users are warned not to upgrade due to a breaking change fixed in v18.0.2. Key improvements include Go 1.24.5 update, VNet DNS fixes for Windows AD domains, cross-account EC2 discovery, and access request CRD support.

Jul 21, 2025

Teleport v18.0.2 is a patch release that fixes a backward compatibility regression causing 'unknown access_list type "dynamic"' validation errors, along with several improvements including glob-style matching for Spacelift join rules, PKINIT compatibility enhancements, Application API pagination, and improved tbot health endpoint reliability.

Jul 17, 2025

Teleport v17.5.6 is a patch release that fixes a backward compatibility issue introduced in versions 17.5.5 and 18.0.1 related to Access List types, adds glob-style matching support for Spacelift join rules, and improves PKINIT compatibility by consistently including CDP information in certificates.

Jul 17, 2025

Teleport 18 introduces major security features including Identity Activity Center for identity risk exposure, automatic access request reviews, multi-session MFA for databases, and RBAC with device trust for SAML applications. The release also adds database health checks and Kubernetes CRD support, along with several breaking changes around TLS cipher suites, Terraform provider defaults, and MFA requirements.

Jul 4, 2025

This is a critical security patch release (v15.5.4) that addresses a remote SSH authentication bypass vulnerability (CVE-2025-49825) affecting servers with Teleport SSH agents, OpenSSH-integrated deployments, and Teleport Git proxy deployments. The release also includes bug fixes for Windows desktop services, DynamoDB storage issues, and a memory leak in Kubernetes Access, along with a Go update to 1.23.10.

Jul 3, 2025

This release addresses a critical security vulnerability (CVE-2025-49825) that allowed remote SSH authentication bypass on servers with Teleport SSH agents, OpenSSH-integrated deployments, and Teleport Git proxy deployments. The patch removes special handling for SSH Certificate authorities in the certificate validation callbacks. Additionally, this release includes numerous bug fixes across Windows desktop services, Kubernetes access, hardware key support, and the tbot client, along with a Go update to 1.23.10.

Jul 3, 2025

Teleport v17.5.4 is a patch release focusing on bug fixes and improvements to Machine and Workload Identity (tbot). The release fixes a critical issue with tbot joining in the Terraform provider and improves tbot's health monitoring capabilities with an enhanced `/readyz` endpoint.

Jul 2, 2025

Teleport v17.5.3 is a critical security patch release that addresses a remote SSH authentication bypass vulnerability (CVE-2025-49825) affecting servers with Teleport SSH agents, OpenSSH-integrated deployments, and Teleport Git proxy deployments. The release also includes numerous bug fixes across database access, Kubernetes, Windows desktop, and Machine/Workload Identity features, along with several new capabilities.

Jul 1, 2025

Teleport v15.5.2 is a patch release focused on security fixes and bug improvements. The release includes a medium-severity security fix for PKINIT (Kerberos) authentication that could allow users to overwrite host files on SQL Server databases, along with several UI and database discovery fixes.

Jun 6, 2025

This is a security patch release for Teleport v16.5.11 addressing two security vulnerabilities: a high-severity access escalation issue in Okta integration where users with just-in-time access could be unintentionally promoted to access lists, and a medium-severity PKINIT/Kerberos vulnerability allowing file overwrite on SQL Server systems. The release also includes several bug fixes for the web UI, Prometheus metrics, tctl commands, Hardware Key Support on Windows, database listing, and OpenSearch discovery.

Jun 5, 2025

Teleport v17.5.1 is a rerelease of v17.5.0 fixing build issues. This release introduces Azure Console support via SAML IdP, desktop access directly in Teleport Connect, latency detection for remote desktop sessions, Sigstore attestation for Machine & Workload Identity, and Azure DevOps secretless bot authentication. The release also addresses three high-severity security vulnerabilities affecting AWS IAM Identity Center, Okta integration, and GitHub SSO users.

Jun 5, 2025

This is an exceptional release for the discontinued Teleport 14 to backport Managed Updates v2, introducing a new automatic update mechanism. The release adds a new `teleport-update` binary that allows administrators to control agent update schedules and versions via `autoupdate_config` and `autoupdate_version` resources, and changes package binary locations from `/usr/local/bin` to `/opt/teleport`.

May 23, 2025