PT-2026-29833
CVE-2026-35386
·
Published
2026-04-02
·
Updated
2026-09-22
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 10.3
Description
OpenSSH versions before 10.3 may allow command execution through shell metacharacters present in a username specified within a command line. This requires an untrusted username on the command line and a non-default configuration of '%' in the ssh config file.
Recommendations
Update to OpenSSH version 10.3 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾