← CVE Intelligence

CVE-2026-55655

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions PUBLISHED

Description (CNA)

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:9.9p1-25.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:9.9p1-7.el10_0.5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.0p1-30.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.0p1-30.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:9.9p1-9.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:9.9p1-9.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:8.7p1-38.el9_4.10 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:8.7p1-45.el9_6.5 before *
Red Hat / Red Hat Hardened Imagesunaffected 10.3p1-6.hum1 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818590 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818589 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818505 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818496 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818502 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818602 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818598 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818512 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818587 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818778 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818512 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818782 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818782 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818627 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818790 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818874 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818792 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818662 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818877 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791883722 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881612 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791885618 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881487 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881732 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791883315 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881486 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881769 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791885505 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819252 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818749 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819206 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818979 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819123 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818901 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791820333 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819495 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819104 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435483 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533529 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4unknown
Red Hat / Red Hat OpenShift Container Platform 4unknown

CWE

CWE-923

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.