Vulnerabilities

TI-2026-85669 CVE-2026-111062

russh SSH server accepts mismatched signature algorithm in publickey auth

MEDIUM 45

russh is a Rust SSH client and server library.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-11-05 Fixed in 0.64.0 CWE-347

TI-2026-82122 CVE-2026-116794 · GHSA-vp5q-ff62-jwqv

Missing confirmation check in russh SSH agent for constrained keys

HIGH 69

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.

CVSS 4.0HIGH 8.3 Local Low privileges No interaction EPSS 0.00156 Published 2026-10-28 Fixed in 0.65 CWE-862

TI-2026-81534 CVE-2026-116775 · GHSA-662x-8wvj-2276

Unbounded frame buffering in pageant enables memory exhaustion

MEDIUM 45

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant instance.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00294 Published 2026-10-27 Fixed in 0.2.5 CWE-770

TI-2026-81533 CVE-2026-116774 · GHSA-fw5c-8223-6h42

Zero maximum packet size in russh stalls SSH channel writes

LOW 20

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2026-10-27 Fixed in 0.65.0, 0.65 CWE-400

TI-2026-81532 CVE-2026-116773 · GHSA-4p9f-7p9m-5vfg

Unbounded memory growth in russh SSH client via EXT_INFO packets

MEDIUM 53

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00258 Published 2026-10-27 Fixed in 0.65.0, 0.65 CWE-770

TI-2026-81531 CVE-2026-116696 · GHSA-9wfm-jcj8-jfv9

Unbounded memory growth in russh SSH agent server

MEDIUM 49

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0011 Published 2026-10-27 Fixed in 0.65.0 CWE-770

TI-2026-76432 CVE-2026-111061 · GHSA-4wc5-f2rc-q74m

Unbounded task creation in russh SSH agent server exhausts memory

MEDIUM 53

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00347 Published 2026-10-19 Fixed in 0.64.1 CWE-770

TI-2026-65514 CVE-2026-102825 · GHSA-g6xm-f9xp-qq35

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

MEDIUM 51

Russh is a Rust SSH client and server library.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00353 Published 2026-09-29 Fixed in 0.62.6 CWE-307

TI-2026-65513 CVE-2026-102824 · GHSA-w3jg-pjxf-73p4

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

LOW 19

Russh is a Rust SSH client and server library.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00141 Published 2026-09-29 Fixed in 0.63.0 CWE-327

TI-2026-65512 CVE-2026-102823 · GHSA-47hw-gvq5-r2gm

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

HIGH 72

Russh is a Rust SSH client and server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00317 Published 2026-09-29 Fixed in 0.63.1 CWE-20

TI-2026-65511 CVE-2026-102822 · GHSA-p8qx-h547-fjw9

russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

MEDIUM 51

Russh is a Rust SSH client and server library.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00327 Published 2026-09-29 Fixed in 0.63.1 CWE-129

TI-2026-65510 CVE-2026-102821 · GHSA-35g8-35p8-c8fw

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

MEDIUM 62

Russh is a Rust SSH client and server library.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00358 Published 2026-09-29 Fixed in 0.63.2 CWE-400

TI-2026-65509 CVE-2026-102820 · GHSA-g4mp-vgx3-xrvm

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

MEDIUM 61

pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00191 Published 2026-09-29 Fixed in 0.63.2, 0.2.3 CWE-125

TI-2026-51601 CVE-2026-73489 · GHSA-cqjc-rmpq-xprq

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

MEDIUM 53

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00451 Published 2026-08-13 Fixed in 0.62.4 CWE-129

TI-2026-51548 CVE-2026-73430 · GHSA-5xvq-cp9x-6p6r

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

LOW 31

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00597 Published 2026-08-12 Fixed in 0.62.4 CWE-754

TI-2026-51547 CVE-2026-73429 · GHSA-g9hv-x236-4qp3

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

MEDIUM 63

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00507 Published 2026-08-12 Fixed in 0.62.4 CWE-704

TI-2026-51120 CVE-2026-72903

Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory

HIGH 68

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00492 Published 2026-08-10 Partial fix · 1.0.235 CWE-22

TI-2026-48467 CVE-2026-68930 · GHSA-m65r-rprj-r5rg

Russh: Channel-scoped server callbacks can be reached without an open channel

MEDIUM 62

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00376 Published 2026-08-03 Fixed in 0.62.5 CWE-666

TI-2026-35550 CVE-2026-48110 · GHSA-4r3c-5hpg-58qr

Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00367 Published 2026-06-10 Fixed in 0.61.0 CWE-20

TI-2026-35548 CVE-2026-48108 · GHSA-76r6-x97p-67vr

Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input

MEDIUM 63

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00277 Published 2026-06-10 Fixed in 0.61.0 CWE-20

TI-2026-35547 CVE-2026-48107 · GHSA-g9g7-5cgw-6v28

Russh: Unchecked keyboard-interactive prompt count in client auth path

LOW 28

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00232 Published 2026-06-10 Fixed in 0.61.0 CWE-20

TI-2026-34333 CVE-2026-46705 · GHSA-hpv4-5h6f-wqr3

russh server userauth state is not reset when authentication principal changes

MEDIUM 63

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2026-06-10 Fixed in 0.61.0 CWE-287

TI-2026-34331 CVE-2026-46702 · GHSA-wwx6-x28x-8259

Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2026-06-10 Fixed in 0.61.1 CWE-770

TI-2026-34308 CVE-2026-46673 · GHSA-g9f8-wqj9-fjw5

Resource allocation without limits in Eugeny russh

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2026-06-10 Fixed in 0.60.3 CWE-770

TI-2025-16084 CVE-2025-22136

Tabby has a TCC Bypass via Misconfigured Node Fuses

HIGH 72

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00361 Published 2025-01-08 Fixed in 1.0.217 CWE-94

Vulnerabilities

Filters