Description
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenBSD | OpenSSH | < 10.5 | 10.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssh +1 | 1:10.5p1-1 | — |
| Debian 13 | openssh | No fix yet | — |
| Debian 12 | openssh | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | openssh-ssh1 | No fix yet | — |
| Ubuntu 26.04 LTS | openssh | 1:10.2p1-2ubuntu3.6 | USN-8721-1 |
| Ubuntu 26.04 LTS | openssh-ssh1 | No fix yet | — |
| Ubuntu 24.04 LTS | openssh | 1:9.6p1-3ubuntu13.19 | USN-8721-1 |
| Ubuntu 24.04 LTS | openssh-ssh1 | No fix yet | — |
| Ubuntu 22.04 LTS | openssh | 1:8.9p1-3ubuntu0.17 | USN-8721-1 |
| Ubuntu 22.04 LTS | openssh-ssh1 | No fix yet | — |
| Ubuntu 20.04 LTS | openssh-ssh1 | No fix yet | — |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | openssh-ssh1 | No fix yet | — |
| Ubuntu Pro FIPS 20.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssh | 1:9.6p1-3ubuntu13.19+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro 20.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro 18.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro 16.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro 14.04 LTS | openssh | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | openssh +5 | 9.9p1-27.el10_2 | RHSA-2026:69129 |
| RHEL 9 | openssh +4 | 9.9p1-11.el9_8 | RHSA-2026:69130 |
| RHEL 9 | pam_ssh_agent_auth | 0.10.4-8.11.el9_8 | RHSA-2026:69130 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | openssh +6 | 10.5p1-1.hum1 | RHSA-2026:70719 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | openssh +5 | 9.9p1-27.el10_2.alma.1 | ALSA-2026:69129 |
| AlmaLinux 9 | openssh +4 | 9.9p1-11.el9_8.alma.1 | ALSA-2026:69130 |
| AlmaLinux 9 | pam_ssh_agent_auth | 0.10.4-8.11.el9_8.alma.1 | ALSA-2026:69130 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | openssh | 9.9p1-27.el10_2.rocky.0.1 | RLSA-2026:69129 |
| Rocky Linux 9 | openssh | 9.9p1-11.el9_8.rocky.0.1 | RLSA-2026:69130 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssh | 9.6p1-150600.6.52.2 | SUSE-SU-2026:4827-1 |
| SLES 15 SP7 | openssh-askpass-gnome | 9.6p1-150600.6.52.1 | SUSE-SU-2026:4827-1 |
| SLES 15 SP6 | openssh | 9.6p1-150600.6.52.2 | SUSE-SU-2026:4827-1 |
| SLES 15 SP6 | openssh-askpass-gnome | 9.6p1-150600.6.52.1 | SUSE-SU-2026:4827-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | openssh | 9.6p1-150600.6.52.2 | SUSE-SU-2026:4827-1 |
| SLES for SAP 15 SP6 | openssh-askpass-gnome | 9.6p1-150600.6.52.1 | SUSE-SU-2026:4827-1 |
| SLE Micro 6.1 | openssh | 9.6p1-slfo.1.1_7.1 | SUSE-SU-2026:24382-1 |
| SLE Micro 6.0 | openssh | 9.6p1-159998.1.1 | SUSE-SU-2026:24140-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssh | 10.3_p1-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssh +4 | 9.9p1-16.amzn2023.0.1 | ALAS2023-2026-3354 |
| Amazon Linux 2023 | pam_ssh_agent_auth | 0.10.4-10.16.amzn2023.0.1 | ALAS2023-2026-3354 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | openssh | 9.8p1-10 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | openssh +5 | 9.9p1-27.0.1.el10_2 | ELSA-2026-69129 |
| Oracle Linux 9 | openssh +4 | 9.9p1-11.0.1.el9_8 | ELSA-2026-69130 |
| Oracle Linux 9 | pam_ssh_agent_auth | 0.10.4-9.11.0.1.el9_8 | ELSA-2026-69130 |
Advisories 16
- WID-SEC-2026-2747 OpenSSH: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2026
- ALAS2023-2026-3354 Moderate: openssh security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 2, 2026
- ALSA-2026:69130 Important: openssh security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:69129 Important: openssh security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:24382-1 Security update for openssh SUSE / openSUSE Security Updates · Oct 27, 2026
- SUSE-SU-2026:4827-1 Security update for openssh SUSE / openSUSE Security Updates · Oct 21, 2026
- SUSE-SU-2026:24140-1 Security update for openssh SUSE / openSUSE Security Updates · Oct 15, 2026
- RHSA-2026:69129 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:69130 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- WID-SEC-2026-3642 Meinberg LANTIME: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2026
- RHSA-2026:70719 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 7, 2026
- ELSA-2026-69129 Important: openssh security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 29, 2026
- RLSA-2026:69130 Important: openssh security update Rocky Linux Security Advisories · Sep 22, 2026
- RLSA-2026:69129 Important: openssh security update Rocky Linux Security Advisories · Sep 22, 2026
- ELSA-2026-69130 Important: openssh security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 22, 2026
- USN-8721-1 openssh vulnerabilities Ubuntu Security Notices (USN) · Sep 3, 2026