Logo
›
›vulnerability›CVE-2026-73281
Name
CVE-2026-73281
Source
NVD ( link)Debian ( link)
Description
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
openssh
Exploitable

Vulnerability Ratings#


3.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
10.6p1
Not Affected
openwrt
master
10.5_p1-r1
Not Affected
openwrt
openwrt-25.12
10.5_p1-r1
Not Affected
yocto
kirkstone
8.9p1
Exploitable
yocto
master
10.6p1
Not Affected
yocto
scarthgap
9.6p1
Exploitable