CVE-2026-106589

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 through 10.6

CWE

CWE-272

References

https://www.openssh.org/releasenotes.html#10.6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.