OESA-2026-4692: openssh security update
An open source implementation of SSH protocol version 2 Security Fix(es):
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.(CVE-2026-106587)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/opensshto a version that resolves this vulnerability.Fixed in 9.6p1-25.oe2403sp1
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that exploitation requires local access and low privileges. No user interaction is required, and the reported impact is limited to integrity.
Which installations are affected?
The issue affects sshd in OpenSSH versions before 10.6. The advisory does not identify which specific configuration option or configurations trigger the unintended filename interpretation.
How can I determine whether a system may be affected?
Check the installed OpenSSH version and review sshd configuration for options set to the value "none". Systems running a version before 10.6 may be affected, although the available information does not specify every option for which this behavior occurs.