Vulnerabilities

TI-2026-85083 CVE-2026-91163

Warpgate Kubernetes listener leaks errors to unauthenticated callers

LOW 17

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00172 Published 2026-11-04 Fixed in 0.29.0 CWE-209

TI-2026-85084 CVE-2026-91168

Warpgate Kubernetes authorization reuse by recreated same-name account

LOW 30

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.0028 Published 2026-11-04 Fixed in 0.29.0 CWE-639

TI-2026-61916 CVE-2026-91167

Missing authorization in warp-tech warpgate

LOW 27

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00414 Published 2026-09-21 Fixed in 0.28.4 CWE-862

TI-2026-61915 CVE-2026-91166

Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target

MEDIUM 61

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00218 Published 2026-09-21 Fixed in 0.27.6 CWE-297

TI-2026-61914 CVE-2026-91165

Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values

LOW 13

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1LOW 2.4 Network High privileges User interaction EPSS 0.00397 Published 2026-09-21 Fixed in 0.27.6 CWE-79

TI-2026-61913 CVE-2026-91164

Warpgate: API tokens bypass the user's allowed_ip_ranges restriction

LOW 20

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00421 Published 2026-09-21 Fixed in 0.27.3 CWE-284

TI-2026-45163 CVE-2026-63330

Improper authorization in warp-tech warpgate

HIGH 67

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00497 Published 2026-09-21 Fixed in 0.25.6 CWE-285

TI-2026-45162 CVE-2026-63329

Improper output encoding in warp-tech warpgate

LOW 22

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00308 Published 2026-09-21 Fixed in 0.25.6 CWE-116

TI-2026-42094 CVE-2026-58491

Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

MEDIUM 42

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00458 Published 2026-09-21 Fixed in 0.25.5 CWE-79

TI-2026-32313 CVE-2026-44347

Warpgate: SSO CSRF -- State Token Not Validated on Return

MEDIUM 62

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00133 Published 2026-05-12 Fixed in 0.23.3 CWE-352

TI-2026-30510 CVE-2026-42189 · GHSA-f5v4-2wr6-hqmg

Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00481 Published 2026-05-08 Fixed in 0.60.1 CWE-770

TI-2025-34558 CVE-2025-54804 · GHSA-h5rc-j5f5-3gcm

Russh is missing an overflow check during channel windows adjust

MEDIUM 62

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0045 Published 2025-08-05 Partial fix · 0.54.1 CWE-190

TI-2024-29059 CVE-2024-43410 · GHSA-vgvv-x7xg-6cqg

Russh has an OOM Denial of Service due to allocation of untrusted amount

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00912 Published 2024-08-21 Fixed in 0.44.1 CWE-770

TI-2023-26551 CVE-2023-48712

User authorization bug leading to privilege escalation in warpgate

LOW 39

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00676 Published 2023-11-24 Fixed in 0.9.0 CWE-863

TI-2023-23385 CVE-2023-43660

SSH key password bypassed in warpgate

LOW 35

Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00302 Published 2023-09-27 Fixed in 0.8.1 CWE-287

TI-2023-18898 CVE-2023-37268

User login confusion with SSO in warpgate

HIGH 73

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00546 Published 2023-07-14 Fixed in 0.7.3 CWE-287

TI-2023-12692 CVE-2023-28113 · GHSA-cqvm-j2r2-hwpg

russh may use insecure Diffie-Hellman keys

LOW 27

russh is a Rust SSH client and server library.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00638 Published 2023-03-16 Fixed in 0.36.2, 0.37.1 CWE-20

Vulnerabilities

Filters