CVE-2022-36633: Teleport command injection via crafted SSH agent install link

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityUnauthenticated remote code execution with public exploit references and a high EPSS score, tempered only by the required user interaction.

What it is

Teleport 9.3.6 is vulnerable to OS command injection that leads to remote code execution. An attacker can URL-encode a bash escape sequence with carriage return and line feed and place it where a token is expected in an SSH agent installation link, then deliver that link to a user through social engineering. The trusted Teleport server is used to deliver the payload, so the malicious link appears to come from a legitimate service.

Impact

Successful exploitation gives the attacker arbitrary command execution in the context of the victim's installation flow, allowing code to run on the affected host. Because the payload is delivered through the trusted Teleport server, the attacker gains execution without needing valid credentials.

Attack surface

The flaw is reached over the network through a crafted SSH agent installation URL that substitutes a URL-encoded bash escape for the expected token. No authentication is required, but the attack depends on user interaction: the victim must open the malicious link, making it a social engineering vector.

Exploitation

CISA KEV does not list this CVE, but public exploit references exist on Packet Storm for Teleport 9.3.6 and 10.1.1, and EPSS gives a 30-day probability of roughly 0.50 (98.8th percentile), indicating elevated likelihood of exploitation activity.

What to do

• Upgrade Teleport to a fixed release; version 9.3.6 is explicitly named as vulnerable, so move to the vendor's patched build.
• Treat SSH agent installation links as untrusted input and validate or sanitize the token parameter before it reaches shell execution.
• Restrict or disable the agent installation link feature if it is not operationally required.
• Train users not to open unsolicited SSH agent installation links, since exploitation requires them to click.
• Monitor Teleport server logs for installation requests containing URL-encoded control characters or shell metacharacters.

Detection

• Search Teleport and web server logs for agent installation requests whose token parameter contains %0d, %0a, or other URL-encoded shell metacharacters.
• Alert on outbound or child process execution spawned by the Teleport agent installation flow, especially bash or sh invocations.
• Review endpoint telemetry for command lines containing carriage return or line feed escapes originating from browser or Teleport-related processes.
• Correlate Teleport installation link generation and access events with subsequent process creation on the same host.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.