Red Hat Security AdvisoryRHSA-2026:1790
openssh security update
Released 2026-02-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) openssh-askpass-8.7p1-13.el9_0.1, pam_ssh_agent_auth-0.10.4-4.13.el9_0.4
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) openssh-8.7p1-13.el9_0.1, openssh-clients-8.7p1-13.el9_0.1, openssh-keycat-8.7p1-13.el9_0.1 +1
Fixes 3 records
Priority HIGH 70
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.19753 · Published 2023-12-18 · Partial fix CWE-78
Priority MEDIUM 52
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2025-10-06 · Partial fix · 10.1 CWE-159
Priority LOW 16
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2025-10-06 · Partial fix · 10.1 CWE-158
