EUVD-2026-56890
GHSA-j58v-28m8-49f3
Severity by source
AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
AV:N reflects the remote agent-forwarding attack path; AC:H for multi-condition dependency on forwarding, session-bind extension, and lock state; PR:L for required authentication; S:C for trust boundary crossing into local agent sphere; I:L for unauthorized key operations; C:N and A:N as no confidentiality disclosure or availability impact is described.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Lifecycle Timeline
3DescriptionCVE.org
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
AnalysisAI
OpenSSH ssh-agent before version 10.5 permits remote execution of agent operations - including adding authentication tokens and using SSH keys - that were architecturally intended to be restricted to local access only. The trust boundary failure stems from a misinteraction between the agent locking mechanism and the session-bind@openssh.com extension, allowing an authenticated remote actor to cross the local/remote privilege boundary. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following: (1) the attacker holds valid SSH credentials and can authenticate to a target system - confirmed by CVSS PR:L; (2) SSH agent forwarding is active for the session, meaning both the client and server have agent forwarding enabled; (3) the session-bind@openssh.com extension is in use, which occurs when modern OpenSSH negotiates this extension during session establishment; and (4) the ssh-agent is in a specific interaction state involving agent locking, per the description. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Multiple signals converge on a low-to-moderate real-world risk profile despite the network vector. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with valid SSH credentials connects to a target server that has agent forwarding enabled; by exploiting the misinteraction between the agent lock state and the session-bind extension, the attacker sends crafted agent protocol messages from the remote session that the ssh-agent incorrectly processes as locally-authorized, allowing the attacker to add tokens to or perform signing operations with keys held in the local agent. No public exploit code has been identified at time of analysis, and AC:H indicates specific timing or configuration conditions must be met, making this a targeted rather than opportunistic attack. |
| Remediation | Upgrade to OpenSSH 10.5 or later, which resolves the misinteraction between the agent locking mechanism and the session-bind@openssh.com extension; the vendor-confirmed release notes are at https://www.openssh.org/releasenotes.html#10.5. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demons
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. Rated medium se
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processin
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password a
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today