OESA-2026-4690: openssh security update
An open source implementation of SSH protocol version 2 Security Fix(es):
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.(CVE-2026-106587)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/opensshto a version that resolves this vulnerability.Fixed in 9.6p1-25.oe2403sp3 - Upgrade
Upgrade
OpenSSHto a version that resolves this vulnerability.Fixed in 10.6
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running sshd from OpenSSH versions before 10.6 are affected when a configuration option uses the value "none" and sshd interprets it as a filename rather than as a disabled feature.
What access does an attacker need?
The supplied CVSS vector indicates local access and low privileges are required. No user interaction is required, and the impact is limited to integrity.
How can I check whether a system may be affected?
Verify the OpenSSH version used by sshd and review its configuration for options set to "none." Versions before 10.6 warrant review because the affected interpretation occurs in sshd.