OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade opensshUpgrade openssh-serverUpgrade openssh-cavs | May 5, 2026 | May 4, 2026 |
| Amazon Linux Ami 2 | — | Upgrade openssh-ldapUpgrade openssh-askpassUpgrade openssh-debuginfoUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-server-sysvinit | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade openssh-server-debuginfoUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade opensshUpgrade openssh-keycatUpgrade openssh-debuginfoUpgrade openssh-serverUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-debugsource | May 28, 2026 | Apr 2, 2026 |
| Debian | — | Upgrade openssh | May 17, 2026 | May 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory21 | May 31, 2026 | May 28, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.3 | Apr 17, 2026 | Apr 2, 2026 |
| Oracle_linux | — | Upgrade openssh-clientsUpgrade openssh-ldapUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-keysignUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-cavs | May 6, 2026 | Apr 2, 2026 |
| Redhat_linux | — | Upgrade openssh-askpassUpgrade openssh-keycat-debuginfoUpgrade openssh-keysignUpgrade openssh-serverUpgrade openssh-keycatUpgrade opensshUpgrade openssh-ldap-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavsUpgrade openssh-askpass-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-clientsUpgrade openssh-keysign-debuginfoUpgrade openssh-ldapUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authNo solution exists | May 4, 2026 | Apr 2, 2026 |
| Rocky_linux | — | Upgrade openssh-askpass-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-debuginfoUpgrade openssh-keysignUpgrade openssh-clientsUpgrade openssh-askpassUpgrade opensshUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavsUpgrade openssh-ldap-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-serverUpgrade openssh-clients-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-debugsourceUpgrade openssh-ldap | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-server (Ubuntu Pro)Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-client | Apr 29, 2026 | Apr 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub