CVE-2026-59851
Discovered by AISLEPUBLISHEDCWE-863
Description
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.
CVSS Base Scores
CVSS v3.1(Primary)
8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| Red Hat | Red Hat Hardened Images | 0.12.1-4.hum1 | unaffected |
| Red Hat | Red Hat Enterprise Linux 10 | 0.12.1-4.hum1 | unaffected |
| Red Hat | Red Hat Enterprise Linux 8 | 0.12.1-4.hum1 | unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | 0.12.1-4.hum1 | unaffected |
Credits
- Red Hat would like to thank Aisle Research for reporting this issue.