In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Sep 1, 2026 | Aug 11, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory22 | Sep 14, 2026 | Sep 11, 2026 |
| Redhat_linux | — | No solution exists | Aug 19, 2026 | Aug 11, 2026 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-server | Sep 14, 2026 | Sep 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub