Moderate Security Vulnerability in OpenSSH: SSHD Agent Forwarding and X11 Forwarding Issue
Summary
RLSA-2025:20126: Moderate: openssh security update. Affects openssh versions < 0:9.9p1-11.el10.rocky.0.1. Fixed in 0:9.9p1-11.el10.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH (Secure Shell) protocol, essential for secure remote login and other secure network services. It is supported by various operating systems, including Linux and UNIX. The package includes both client and server components, allowing users to securely connect to remote systems. However, OpenSSH has been found to have a vulnerability related to SSHD Agent Forwarding and X11 Forwarding, which could potentially expose sensitive information.
Vulnerability Detail
The vulnerability identified as CVE-2025-32728 affects the SSHD Agent Forwarding and X11 Forwarding features of OpenSSH. This issue arises from improper handling of forwarded authentication requests, which could allow an attacker to gain unauthorized access to sensitive data or execute arbitrary commands on the affected system. The potential ramifications include unauthorized access to user sessions and exposure of confidential information, making it critical to address this vulnerability promptly.
How To Fix
Minimum fixed version
0:9.9p1-11.el10.rocky.0.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can disable SSH agent forwarding and X11 forwarding in your SSH configuration. This can be done by modifying your SSH client configuration file (usually located at ~/.ssh/config) and adding the following lines: 'ForwardAgent no' and 'ForwardX11 no'. This will prevent the use of these features until the package is updated.
Conclusion
The OpenSSH vulnerability CVE-2025-32728 poses a moderate security risk due to issues with SSHD Agent Forwarding and X11 Forwarding. It is crucial to update to the latest patched version to protect against potential unauthorized access and data exposure. Implementing the recommended fixes and workarounds will help secure your system.
See every vulnerability recorded for openssh →
FAQ
CVE-2025-32728 is a security vulnerability in OpenSSH that affects SSHD Agent Forwarding and X11 Forwarding, potentially allowing unauthorized access to sensitive information.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Failure to address this vulnerability could lead to unauthorized access to user sessions and exposure of sensitive data, posing significant security risks.
Yes, a patched version of OpenSSH is available. Updating to version 0:9.9p1-11.el10.rocky.0.1 or later will fix the vulnerability.
You can update OpenSSH by running the command 'sudo yum update openssh' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
