A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.
CVSS Details
- CVSS 3.1 Base Score: 3.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh | Jul 29, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade libssh | Aug 3, 2026 | Aug 3, 2026 |
| Redhat_linux | — | Upgrade libssh-develUpgrade libssh-debugsourceUpgrade libssh-debuginfoUpgrade libssh-configUpgrade libssh | Jul 23, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade libssh-debugsourceUpgrade libssh-debuginfoUpgrade libsshUpgrade libssh-devel | Aug 20, 2026 | Aug 18, 2026 |
| Ubuntu | — | Upgrade libssh-4 | Aug 31, 2026 | Aug 31, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub