Critical Security Update for OpenSSH: Privilege Escalation and Bypass Vulnerabilities
Summary
ALSA-2026:19219: Important: openssh security update. Affects openssh versions < 9.9p1-7.el9_8.alma.1. Fixed in 9.9p1-7.el9_8.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH protocol, providing secure communication over unsecured networks. It is essential for remote server management and file transfers. The package includes both client and server components, making it a critical tool for system administrators. However, recent vulnerabilities have been identified that could potentially compromise system security.
Vulnerability Detail
The vulnerabilities in OpenSSH include privilege escalation via the legacy SCP protocol when file modes are not preserved, security bypass due to mishandling of authorized_keys principals, information disclosure from unintended cryptographic algorithm usage, low integrity impact from unconfirmed proxy-mode multiplexing sessions, and arbitrary command execution through shell metacharacters in usernames. These vulnerabilities could allow attackers to gain unauthorized access, execute arbitrary commands, or disclose sensitive information.
How To Fix
Minimum fixed version
9.9p1-7.el9_8.alma.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the SCP legacy protocol and ensure that file modes are preserved during file transfers. Additionally, review and restrict the use of the authorized_keys principals option to mitigate the risk of security bypass.
Conclusion
The recent vulnerabilities in OpenSSH pose significant risks to system security. It is crucial for users to update their packages to the latest patched versions to mitigate these risks. Implementing workarounds can provide temporary relief, but a complete update is the best course of action.
See every vulnerability recorded for openssh →
FAQ
OpenSSH is an open-source implementation of the SSH protocol, providing secure communication for remote management and file transfers.
The vulnerabilities could lead to unauthorized access, arbitrary command execution, and potential information disclosure.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider implementing workarounds such as limiting SCP usage and reviewing authorized_keys configurations.
For detailed information, refer to the CVE pages linked in the advisory or the official OpenSSH documentation.
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.