CVE-2026-73429

Name of the Vulnerable Software and Affected Versions russh versions prior to 0.62.4

Description A malicious SSH server can crash a client session by sending a malformed KEX ECDH REPLY containing a server ephemeral value that is not 32 bytes long. The Curve25519Kex::compute shared secret() function passes the decoded exchange.server ephemeral value to clone from slice() without validating its length, leading to a deterministic panic before the server host key is verified. This panic terminates the spawned client session task, resulting in a JoinError, although the embedding process typically continues to run.

Recommendations Update to version 0.62.4.