CVE-2025-32728: Medium severity openssh server vulnerability
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32728?
CVE-2025-32728 has been assessed as a moderate severity vulnerability due to its potential impact on secure remote session forwarding.
How do I fix CVE-2025-32728?
To fix CVE-2025-32728, you should upgrade OpenSSH to version 10.0 or later where the DisableForwarding directive functions as documented.
What are the consequences of CVE-2025-32728?
The consequences of CVE-2025-32728 include the unintended allowance of X11 and agent forwarding, which could lead to security breaches.
Which versions of OpenSSH are affected by CVE-2025-32728?
CVE-2025-32728 affects OpenSSH versions prior to 10.0, specifically affecting the sshd component.
Is there a workaround for CVE-2025-32728?
A workaround for CVE-2025-32728 is to manually configure the forwarding settings in your SSH configuration until an upgrade can be applied.