CVE-2026-106588: Low severity OpenSSH OpenSSH vulnerability
Published Oct 6, 2026
·Updated
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.
Affected Software
1 affected component
OpenSSH OpenSSH<=10.6
Event History
Oct 6, 2026
CVE Published
via MITRE·09:10 PM
Data Sourced
via MITRE·09:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected by this issue?
The issue applies to sshd in OpenSSH through 10.6 when it is built using the macOS 27 or later SDK. The described impact is loss of sshd sandboxing.
2
What access does an attacker need to exploit this?
The provided vector indicates network reachability, low privileges, and no user interaction, but also high attack complexity. The reported impact is limited to integrity; no confidentiality or availability impact is listed.