CVE-2026-73281

Katalog CVE

CVSS 3.5 · Low EPSS 0,16%

Kerentanan Incorrect Resource Transfer Between Spheres pada openbsd openssh. Skor CVSS 3.1 3.5 (Low) menurut mitre.org.

Deskripsi (NVD)

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

Rincian

Terbit di NVD

11 Agustus 2026

Terakhir diubah

4 September 2026

Status NVD

Analyzed

CVSS 3.1

3.5 (Low), sumber mitre.org
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.openssh.org/releasenotes.html#10.5 product · release notes