CVE-2026-106587: Low severity OpenSSH sshd vulnerability
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:10.6p1-1 - Upgrade
Upgrade
debian/openssh-gssapito a version that resolves this vulnerability.Fixed in 1:10.6p1-1 - Upgrade
Upgrade
OpenSSHto a version that resolves this vulnerability.Fixed in 10.6
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires local access, low privileges, and high attack complexity. No user interaction is required.
What security impact is indicated?
The reported impact is limited to integrity and availability; no confidentiality impact is indicated. The severity is low, with a score of 3.6.
Which deployments need to be reviewed?
Review sshd configurations on OpenSSH versions before 10.6, particularly configuration options set to the value "none" where that value is intended to disable a feature.