CVEvulnerability

CVE-2026-73281

3.5 LOW Published 2026-08-11 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-08-11
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-669

Description

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.

Affected configurations

• openbsd openssh (< 10.5)

Related

Weakness · CWE (1)

  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References