CVE-2026-106586

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 before 10.6

CWE

CWE-670

References

https://www.openssh.org/releasenotes.html#10.6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.