CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

What is CVE-2025-14821?

CVE-2025-14821 is a high-severity vulnerability in Redhat Hardened Images, published on 7 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.

Weakness: CWE-427

Which versions are affected by CVE-2025-14821?

It affects 2 products.

Products include Libssh Libssh, Redhat Hardened Images.

How do I fix CVE-2025-14821?

Apply the vendor's patch.

Is CVE-2025-14821 being exploited?

There is no known exploitation of CVE-2025-14821 in the wild and no public exploit code.

Other vulnerabilities in Redhat Hardened Images

• CVE-2026-59851 Libssh: libssh: authentication bypass via missing gssapi principal check High 8.8
• CVE-2025-5987 Libssh: invalid return code for chacha20 poly1305 with openssl backend High 8.1
• CVE-2012-4560 Memory corruption in n/a High 7.5
• CVE-2012-4562 Integer overflow in n/a High 7.5
• CVE-2012-6063 Use after free in n/a High 7.5

All Redhat Hardened Images vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5jf9-8f86-jhvw, JLSEC-2026-778, MINI-63m5-4cqc-23mv, MINI-qrq6-vxgq-w6gq.