Skip to main content

OpenSSH CVE-2026-35385

| EUVD-2026-18398 HIGH
Improper Preservation of Permissions (CWE-281)
2026-04-02 mitre GHSA-jgqr-738j-43cg
Information Disclosure SSH
7.5
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

8
Analysis Updated
Apr 27, 2026 - 14:14 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 27, 2026 - 14:07 vuln.today
cvss_changed
Analysis Updated
Apr 16, 2026 - 06:08 EUVD-patch-fix
executive_summary
Re-analysis Queued
Apr 16, 2026 - 05:29 backfill_euvd_patch
patch_released
Patch available
Apr 16, 2026 - 05:29 EUVD
10.3
EUVD ID Assigned
Apr 02, 2026 - 17:00 euvd
EUVD-2026-18398
Analysis Generated
Apr 02, 2026 - 17:00 vuln.today
CVE Published
Apr 02, 2026 - 16:30 nvd
HIGH 7.5

DescriptionNVD

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).

AnalysisAI

File permission escalation in OpenSSH legacy scp allows remote attackers to install setuid/setgid binaries when downloading files as root. OpenSSH versions before 10.3 are affected when using legacy scp protocol (-O flag) without -p (preserve mode). …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: identify all systems running OpenSSH versions prior to 10.3p1 using vulnerability scanning or package inventory tools; prioritize systems where legacy scp (-O flag) is enabled or root file transfers occur. Within 7 days: upgrade affected OpenSSH installations to version 10.3p1 or later on all identified systems; test upgrades in non-production environments first. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Vendor StatusVendor

Share

CVE-2026-35385 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy