CVE-2026-106586: Medium severity OpenSSH OpenSSH vulnerability
In sshd in OpenSSH before 10.6, the restrict keyword (in authorizedkeys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:10.6p1-1 - Upgrade
Upgrade
debian/openssh-gssapito a version that resolves this vulnerability.Fixed in 1:10.6p1-1 - Upgrade
Upgrade
OpenSSHto a version that resolves this vulnerability.Fixed in 10.6
Event History
Frequently Asked Questions
Which deployments are affected?
OpenSSH sshd versions before 10.6 are affected where the restrict keyword in authorized_keys is relied on to restrict tunnel forwarding.
What access and conditions are indicated for exploitation?
The supplied CVSS vector indicates local access, low privileges, and high attack complexity. The documented impact is limited to integrity; no confidentiality or availability impact is indicated.
Which version should be used to remediate this issue?
Upgrade OpenSSH to version 10.6 or later. The issue is described as affecting versions before 10.6.