Skip to content
TrustMyStack, home

teleport

v18.10.0
gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

Version of gravitational/teleport you run

CompareView on GitHub
Maintenance
Active17 commits in 3 months · bus factor 14
License
AGPL-3.0Copyleft · OSI-approved
Security
5 advisories3 critical, 2 high · Scorecard 5.6/10
Supported versions
2 lines supportednewest 18 · oldest 17 · 1 ended

21.1k stars · 2.2k forks · 3.2k open issues · last release 4 months ago · data checked 5 hours ago

OverviewTourReleasesDocker imagesSecurityLogos

Supported versions

Source: endoflife.date
LineLatestReleasedSecurity fixes
1818.11.10Jul 4, 2025Supported
1717.7.29Nov 15, 2024Supported
1616.5.18Jun 13, 2024Ended Oct 31, 2025

Breaking changes

What to check before upgrading, taken from the notes of the last 30 releases.

  • v17.7.26Jun 23, 2026

    Breaking changes

    Kubernetes API server proxy access

    Access to the Kubernetes API server pods/{name}/proxy/{path},

    services/{name}/proxy/{path}, and nodes/{name}/proxy/{path}

    endpoints now requires the new proxy verb in kubernetes_resources.

    Previously these endpoints were authorized as the get verb. Roles

    that use the Kubernetes API server proxy must add "proxy" to the

    relevant verbs list.

Release history

All releases on GitHub
Atom feed/feed/gravitational/teleport
BadgeLatest version of gravitational/teleport[![version](/badge/gravitational/teleport)](/p/gravitational/teleport)

Teleport 18.10.0

Description

Directory sharing enhancements for Windows desktop access

Teleport now supports sharing multiple directories in a single RDP session. In

addition, users will be able to unmount shared directories without terminating

the session.

Windows sessions summaries

Identity Security now supports AI summarization for Windows desktop access

session recordings.

Other fixes and improvements

  • Resolve connectivity issues with the Redshift database through the MCP. #68337
  • Fixed premature session expiry for Application Access. #68337
  • Updated dependencies (addresses GO-2026-5547 and GO-2026-5694). #68152
  • Kubernetes resource RBAC now honors a wildcard (*) verb regardless of its position in the verbs list, including when introduced via trait templating. #68143
  • Added the Sub CA tctl auth update-override command, a user-friendly alternative over tctl create -f or tctl edit ca_overrides. #68189
  • Kubernetes: adding an ephemeral container to a pod (pods/ephemeralcontainers) now requires both the exec and patch/update verbs in the same role's kubernetes_resources. Previously only patch/update was required. #68159
  • Invalid role expressions are now rejected at creation time. #67607
  • Reject wildcards in role.allow.request.search_as_roles and role.allow.review_requests.preview_as_roles at creation time. #67607
  • Add missing validation for role.allow.require_session_join and role.allow.join_sessions fields. #67607
  • Improved the rate of Azure VM auto-discovery and enrollment. #67941
  • Fixed cloud-hosted Slack plugin exposing credentials in request URLs. #68017
  • Fix an issue where the WebUI would prompt for MFA multiple times for admin actions (or outright fail for select commands) when sso is the only allowed second factor on the cluster. #67867
  • Prevent misrouting when multiple apps share the same public address. #67947
  • Fix MFA prompts to show correct --mfa-mode values for webauthn authenticators. #67971
  • Fixed HTTP application access connections returning repeated 403 errors after certificate renewal. When the certificate behind a long-lived connection expires, the proxy now sends Connection: close so the client reestablishes the connection with a renewed certificate instead of reusing a dead one. #68099
  • Add "tsh apps logins" command to query available logins for the given cloud application (currently only AWS is supported). #68052
  • Added the Sub CA tctl auth delete-override command, a user-friendly alternative over tctl edit ca_overrides or tctl rm ca_overrides. #68014

Enterprise:

  • Changed Sub CA RPCs to emit audit error events for all failures.
  • Fixed Access List review badge not appearing on the main page for users who are both an owner and a member of an Access List.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Full release notesCompare with previous