A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-askpassUpgrade openssh-cavs | Aug 2, 2026 | Jul 29, 2026 |
| Amazon_linux_2023 | — | Upgrade openssh-clients-debuginfoUpgrade openssh-sk-dummyUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-debugsourceUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade pam_ssh_agent_auth-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade openssh-keycat-debuginfoUpgrade openssh-server | Aug 10, 2026 | Jun 23, 2026 |
| Redhat_linux | — | Upgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-askpass-debuginfoUpgrade openssh-keycatUpgrade openssh-keysignUpgrade openssh-ldap-debuginfoUpgrade openssh-debuginfoUpgrade openssh-ldapUpgrade opensshUpgrade openssh-keycat-debuginfoUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-cavs-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clients-debuginfoNo solution existsUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keysign-debuginfoUpgrade openssh-debugsource | Jul 17, 2026 | Jun 22, 2026 |
| Rocky_linux | — | Upgrade opensshUpgrade openssh-server-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade openssh-ldap-debuginfoUpgrade openssh-cavsUpgrade openssh-cavs-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-ldapUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-askpass | Aug 3, 2026 | Jul 30, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 3, 2026 | Jun 23, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub