Moderate Vulnerability in OpenSSH: SFTP Security Bypass and GSSAPI Issues
Summary
RLSA-2026:85958: Moderate: openssh security update. Affects openssh versions < 0:9.9p1-13.el9_8.rocky.0.1. Fixed in 0:9.9p1-13.el9_8.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH protocol, providing secure communication over unsecured networks. It includes essential components for both client and server functionalities, making it integral to many Linux, UNIX, and similar operating systems. The package is known for its robust security features, but recent vulnerabilities have raised concerns regarding its command-line argument parsing and GSSAPI authentication processes.
Vulnerability Detail
The vulnerabilities identified in OpenSSH include a security bypass in SFTP due to flawed command-line argument parsing (CVE-2026-59997), undocumented behavior in GSSAPIStrictAcceptorCheck affecting security in Windows Active Directory (CVE-2026-59998), and a Denial of Service risk through excessive GSSAPI authentication attempts (CVE-2026-60000). These issues could lead to unauthorized access, security breaches, and service disruptions.
How To Fix
Minimum fixed version
0:9.9p1-13.el9_8.rocky.0.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of SFTP and GSSAPI authentication until the package is updated. Additionally, configuring strict access controls and monitoring authentication attempts can help mitigate potential risks.
Conclusion
In summary, the recent vulnerabilities in OpenSSH pose significant risks that can compromise system security and availability. It is crucial for users to update to the latest patched version to mitigate these risks effectively. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openssh →
FAQ
The CVSS score of the vulnerability is 6.5, indicating a moderate level of risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerabilities could lead to unauthorized access, security breaches, and denial of service, affecting the integrity and availability of services.
Yes, the patched version 0:9.9p1-13.el9_8.rocky.0.1 is safe to use as it addresses the identified vulnerabilities.
If immediate updates are not possible, consider implementing strict access controls and monitoring authentication attempts as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
