Teleport: Incident updated: Security Maintenance

Incident updateNormal progress (rule, 100%)Changed 2026-10-20 16:23 UTCstspg.io

Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

~~Struck in red~~ is what Teleport removed; blue is what they added. Muted text is unchanged context.

AddedUpdateidentified2026-10-20 16:20 UTC#1

not present

We investigated the impact of CVE-2026-111943 and prepared updated releases of Teleport (18.11.6 and 17.7.31). These releases were built with a patched Go version protected against CVE-2026-111943. While this vulnerability does not directly affect the Teleport CA, Teleport relies on TLS/HTTPS for intercomponent communication and integration with external services like SSO, leaving those integration points potentially vulnerable. We encourage self-hosted customers to update all Teleport components (agents and client tools) to a patched version as soon as possible. We have begun an emergency rollout to update Teleport and Teleport Cloud itself. During this window customers may experience connection drops as we upgrade and restart components. For customers enrolled in managed updates, agents and tools will automatically be upgraded to a patched version. We will post an update by 10/21/26 9:00 AM PDT or sooner if we have additional updates.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 20
Before captured 03:03 UTC
In the 2026-10-20 checkpoint, timestamped by FreeTSA and DigiCert on Oct 21, 00:41 UTC. Record hash d899c0dd5b8b272f…
Download proof
Oct 20
After captured 16:23 UTC
In the 2026-10-20 checkpoint, timestamped by FreeTSA and DigiCert on Oct 21, 00:41 UTC. Record hash 977f8c3550a0a0a3…
Download proof

History of this incident

Thursday, October 29

1 incident change

Normal progress
16:33Incident
Incident updateSecurity Maintenance

Saturday, October 24

1 incident change

Normal progress
02:13Incident
Incident updateSecurity Maintenance

Wednesday, October 21

1 rewrite, 1 incident change

Wording only
01:03Edited by the vendor
Security Maintenance
Normal progress
00:43Incident
Incident updateSecurity Maintenance

Tuesday, October 20

1 incident change

Normal progress
16:23Incident
Incident updateSecurity Maintenancethis change

Cite this

Incident updated: Security Maintenance on Teleport’s status page, changed 2026-10-20 16:23 UTC (change 1 of 5).

Title: Incident updated: Security Maintenance
Vendor: Teleport
Date: 2026-10-20 16:23 UTC
URL: https://rewindex.com/change/r1bfa247edf9ac6

All Teleport changes Teleport profile Markdown JSON