OESA-2026-4782: openssh security update
An open source implementation of SSH protocol version 2 Security Fix(es):
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.(CVE-2026-106587)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/opensshto a version that resolves this vulnerability.Fixed in 9.6p1-27.oe2403sp4 - Upgrade
Upgrade
OpenSSHto a version that resolves this vulnerability.Fixed in 10.6
Event History
Frequently Asked Questions
Which systems are affected?
Systems running sshd from OpenSSH versions earlier than 10.6 are affected. The issue concerns cases where a configuration option is set to "none" and that value is interpreted as a filename rather than disabling the feature.
What level of access does an attacker need?
The supplied CVSS vector indicates local access and low privileges are required. It indicates an integrity impact, with no reported confidentiality or availability impact.
How can I determine whether a system may be vulnerable?
Check whether the installed OpenSSH version is earlier than 10.6. Review sshd configuration values set to "none," although the supplied data does not identify which specific configuration option is involved.