# CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

> A remote attacker can crash SSH servers using the Go crypto library by presenting a certificate when specific authority callbacks are unset.

- **Severity:** Medium 5.3 (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`)
- **Exploited in the wild:** Not known
- **Login needed:** Not needed
- **Attackable:** Over the internet
- **Victim action needed:** Not needed
- **Fix available:** Yes
- **Published:** 22 May 2026
- **Updated:** 18 Sep 2026
- **Also known as:** AZL-87191, AZL-87248, AZL-87308, AZL-87417, AZL-87465, AZL-87627, AZL-87702, AZL-87768, AZL-87912, AZL-87975, AZL-88071, AZL-88167, AZL-88332, BELL-CVE-2026-39835, CLEANSTART-2026-AU10912, CLEANSTART-2026-BI76349, CLEANSTART-2026-CT85138, CLEANSTART-2026-FU22505, CLEANSTART-2026-GM89854, CLEANSTART-2026-GO89521, CLEANSTART-2026-HG42719, CLEANSTART-2026-IY38231, CLEANSTART-2026-MF33495, CLEANSTART-2026-MK72782, CLEANSTART-2026-XX63539, CLEANSTART-2026-ZS14091, CLSA-2026-1784132479, CLSA-2026-1784133121, CLSA-2026-1784155512, CLSA-2026-1786960012, DEBIAN-CVE-2026-39835, ECHO-9850-7a56-4e4c, GHSA-78mq-xcr3-xm33, GO-2026-5015, MINI-223f-j7cv-7jrm, MINI-229h-hwfj-r63w, MINI-22g3-6jw6-7j3x, MINI-22q3-6jv7-8qr5, MINI-22q9-hmcj-672g, MINI-22r8-jp4f-338v, MINI-22v5-jc6j-55vp, MINI-22xr-3gq8-cvr9, MINI-22xv-qjw5-69gf, MINI-236c-fhw5-c6hr, MINI-23j5-5c27-44fx, MINI-23mf-75rw-wq2x, MINI-24hf-mx94-fpjj, MINI-24qc-gm84-3gvm, MINI-2553-wfcj-rpf8, MINI-2579-f6gq-r2h7, MINI-25qj-7jq9-fvq6, MINI-25x8-9qpg-r4xw, MINI-263j-r7wj-cc88, MINI-266g-9cr9-fq6x, MINI-26qg-6qv8-f44w, MINI-26qx-wc3m-mxmw, MINI-273m-m7m5-hjjq, MINI-27rc-2v7j-4xpq, MINI-27w8-j9rr-wf6h, MINI-289g-5vph-wphr, MINI-2942-chw2-2gfj, MINI-299r-7pj8-3v7x, MINI-29f4-xwcx-qf5j, MINI-29fh-9jq6-c8wr, MINI-29x7-pmxw-8wvx, MINI-2c8w-cxh5-jc68, MINI-2cwj-73x2-wxv8, MINI-2g3q-w88g-cw33, MINI-2gf2-mprh-6244, MINI-2gg6-9f2h-qqqj, MINI-2gmq-wfw5-r6vv, MINI-2gr4-342r-h6wq, MINI-2gvx-2fqj-26xx, MINI-2h4g-jv23-jgcq, MINI-2h6m-44xv-qmw5, MINI-2h8c-8h2q-r9hw, MINI-2hhj-5pj4-xxhj, MINI-2hq8-52jf-4xx7, MINI-2hw3-q598-8352, MINI-2j7w-879h-6hqv, MINI-2jcv-j4wc-pxw7, MINI-2jg2-mmq9-jwrv, MINI-2jgr-23rc-2vjc, MINI-2jwv-f8mq-mj5r, MINI-2m2j-rqw9-r5q8, MINI-2m7r-p3g9-pc87, MINI-2mvx-7mff-wc2h, MINI-2mxx-9xm9-x334, MINI-2p9f-jxxr-c928, MINI-2q49-q4v5-5pjh, MINI-2q65-ccvh-rx77, MINI-2q66-2q67-v26w, MINI-2vmc-cx87-rw46, MINI-2vp9-7x4c-6cwc, MINI-2vwx-vhxx-whrf, MINI-2w25-2jpc-f455, MINI-2x8f-mhhh-782v, MINI-2x8q-566c-vh6p, MINI-2xgp-x378-5fj3, MINI-2xp6-jmvx-7cq4, MINI-2xq4-f89f-2mmg, MINI-32q9-2r34-gr3q, MINI-32rv-5xw4-7v6m, MINI-3394-65ph-9855, MINI-33pw-3hq6-pf75, MINI-34w6-w4xg-2c3r, MINI-357j-74fg-xjgp, MINI-3587-62mm-6386, MINI-35gm-82jw-wr83, MINI-35m9-m833-8pwc, MINI-35qf-wvcc-x9rc, MINI-369c-8j63-gf93, MINI-369f-q896-94r2, MINI-36x9-6wrh-wwh3, MINI-3738-3hg5-w3fm, MINI-385g-r5wj-j4rm, MINI-388m-h3ww-h62r, MINI-38rj-pf83-7q7j, MINI-395j-5f9w-gvq6, MINI-3chg-9pj3-4r3m, MINI-3frc-jjwr-rc86, MINI-3fv8-r3pj-w6qq, MINI-3g94-h59m-h935, MINI-3h83-fv2f-vc8r, MINI-3h9m-mf4q-269w, MINI-3hc2-gvrm-chhh, MINI-3hfq-4459-h3q2, MINI-3hxc-3xmw-gh9p, MINI-3j97-9363-w5jw, MINI-3jqv-cw77-9gwh, MINI-3mmj-j65q-hrxr, MINI-3p4p-46xw-vmmr, MINI-3pg2-3x3j-qrgf, MINI-3pmg-jgq3-vcr7, MINI-3qq7-mfq8-fj67, MINI-3v7m-vc4w-7857, MINI-3v8m-4grx-vghx, MINI-3vr9-5fv4-wf75, MINI-3w6h-4qgg-gwr9, MINI-424f-3xjj-7rrw, MINI-424p-rc6f-473g, MINI-42h9-qx74-vc9x, MINI-42x5-vpmq-f668, MINI-4384-qphf-wm84, MINI-4387-rvq3-54j2, MINI-43mc-6576-w8ph, MINI-44fr-5fwp-9rj7, MINI-44j8-8j25-r7vx, MINI-44w5-mm54-2f36, MINI-454p-p3rf-869f, MINI-463f-79rq-84wq, MINI-467m-86gx-2x3p, MINI-46gg-j2wh-4wcf, MINI-46jq-254j-f5xw, MINI-46pc-x67v-5r85, MINI-479g-mp48-r8q4, MINI-47c8-256c-4gh4, MINI-48fv-cc64-986w, MINI-48mf-hj57-cr6g, MINI-48mf-m8q9-fwv3, MINI-492p-qj8x-w585, MINI-4993-7wrc-6f98, MINI-499r-9r63-fjjp, MINI-49fg-v86c-27qp, MINI-49pp-rfcx-qqj6, MINI-4c4x-pvq5-72rr, MINI-4c7j-f5c9-rhwr, MINI-4c9p-jj7w-j78v, MINI-4cf2-3xc6-pm3j, MINI-4cfw-jm72-ch3c, MINI-4cm5-vq8f-vhc2, MINI-4cpf-6jph-3qff, MINI-4crc-ww9x-8m5f, MINI-4fxx-7gqh-7gg7, MINI-4g4r-ccm2-q927, MINI-4g7x-4vvx-5j59, MINI-4g8g-r7xc-933r, MINI-4gj9-vv4f-r6h3, MINI-4gqp-8hm8-p9rr, MINI-4grm-86f2-vq78, MINI-4h7r-jx37-xqwr, MINI-4j49-v7mr-qxp7, MINI-4j7m-2pgq-4963, MINI-4jpc-v5cg-cmmm, MINI-4jvj-93j3-f8jp, MINI-4jx8-hhfx-jjm9, MINI-4m3x-6fhr-g927, MINI-4m5h-3v6j-mxcc, MINI-4m83-qfrf-qv5w, MINI-4mmm-wvqg-77h2, MINI-4mqr-whc2-2qfc, MINI-4mwc-hgp3-f7g9, MINI-4pcf-84ph-8gc8, MINI-4q2p-rcc7-rp4x, MINI-4q8p-4v54-7p5c, MINI-4qcc-3gxq-4pwr, MINI-4qjx-27c7-7x49, MINI-4qrq-gwwv-vwx6, MINI-4rc6-3w86-fgw8, MINI-4rgh-vpvj-c982, MINI-4rj5-3mpv-557f, MINI-4rjj-x85v-6pwp, MINI-4rv2-x6g8-8cwr, MINI-4rv3-c4xh-r58x, MINI-4wj3-wvf6-rc76, MINI-4wmp-6mff-j887, MINI-4wpx-x6hm-5g2h, MINI-4x8x-9g7p-83g4, MINI-4xpw-8m53-7jmx, MINI-4xvm-pg9m-9r8r, MINI-4xxf-4f7g-g5v9, MINI-5294-q6q8-47mc, MINI-52fm-4c2f-93qc, MINI-52rc-575w-rwfj, MINI-52vh-qhpm-r938, MINI-53jh-xjfj-jg32, MINI-53x2-g473-3qpw, MINI-53x9-wfjh-4mwv, MINI-542r-hmqq-p542, MINI-544f-9qgw-cjcr, MINI-545c-cw3r-m7q6, MINI-5489-7mc7-c27h, MINI-54w8-vmh2-6v9g, MINI-55gf-7584-f685, MINI-5646-h7jv-rh76, MINI-56v4-589w-qfjx, MINI-5738-jhgv-32rh, MINI-57fx-g3hx-9699, MINI-57hq-59fc-5885, MINI-58h7-487f-2xfp, MINI-58qf-jqf2-h8cr, MINI-59fc-3jx9-pcpf, MINI-59qv-hpqg-7qqv, MINI-59rr-322v-r5gj, MINI-5c2w-6599-m77h, MINI-5fm4-rm5c-xw35, MINI-5g23-vjc9-rrvw, MINI-5g5x-qj8f-63fv, MINI-5gcq-fv75-359c, MINI-5grq-xxq2-gpr4, MINI-5gv6-7pxw-37r9, MINI-5gvg-hcph-vxvc, MINI-5h86-jqxf-xj2f, MINI-5j2c-m7h5-w4p5, MINI-5j97-855p-56jx, MINI-5jqq-wj9p-8v97, MINI-5m3j-3q3f-h7w8, MINI-5m92-54q7-rq5q, MINI-5mcw-m83m-f6vf, MINI-5mfq-q2wf-f828, MINI-5mhw-c85w-7xq4, MINI-5mmr-hxr6-vr5r, MINI-5mq6-rrv7-gw9r, MINI-5prm-36rj-qg4f, MINI-5rf6-p46x-qwgc, MINI-5rq5-jxm7-ph48, MINI-5v34-j7gh-wcjq, MINI-5v8m-vq5g-7rwc, MINI-5w2h-2j9q-pmj9, MINI-5w2h-w73q-8h4m, MINI-5w8g-qhq9-vjvr, MINI-5wmq-c846-fjp4, MINI-5x7j-28cr-36jh, MINI-5x9g-rp33-h64w, MINI-627m-m75p-gvrv, MINI-62mq-vjr5-8j62, MINI-63j3-cvhj-434r, MINI-648v-pcvq-f6mm, MINI-64m3-cv78-7fvw, MINI-64px-7mp3-66v3, MINI-656r-46p3-7qhw, MINI-6579-9f44-pggh, MINI-65gg-j8jr-c37h, MINI-65hg-j3x4-m5q7, MINI-6657-h9g9-4j7j, MINI-669q-7h7j-qfhw, MINI-66gw-mr2j-7rw3, MINI-66h3-63h7-3f4h, MINI-66jq-77mh-76c2, MINI-66pj-3576-x263, MINI-6956-7h64-hqf3, MINI-696p-f9xv-fp89, MINI-69jf-j4mv-5rvh, MINI-69v2-m8rv-g4hp, MINI-69wf-9m6p-xx9x, MINI-6cmh-27pm-7jch, MINI-6cpq-qhq3-cr26, MINI-6crp-6j7h-v322, MINI-6cxw-4rx4-xp9f, MINI-6f37-5q9g-5qpj, MINI-6fgv-wcmc-wcgc, MINI-6fh2-c7rf-xwc5, MINI-6fmx-jcwg-wqxh, MINI-6fr8-j7g7-4fg7, MINI-6g72-8m84-m7j9, MINI-6gh4-4vp7-7xvr, MINI-6gjf-6grh-98hq, MINI-6gvw-pcwc-fj38, MINI-6gvx-fvvq-m4jf, MINI-6h93-7g59-mpgp, MINI-6h9x-h4pp-h6gj, MINI-6hcc-94r4-78rq, MINI-6hwr-cc92-h4v8, MINI-6jgm-xr85-wg6x, MINI-6m2g-r392-rqhq, MINI-6mj6-8hc8-q6h3, MINI-6pf5-9x39-gvmq, MINI-6pvj-mg5r-9fcx, MINI-6qgr-xm6j-2h95, MINI-6vhg-p38p-6pw8, MINI-6vvx-wfwv-cwwx, MINI-6w7q-qjh2-q9p8, MINI-6wc2-fj76-vgf5, MINI-6wf6-2jww-4jfw, MINI-6wv2-q74j-225r, MINI-6wwg-mvg6-prhx, MINI-6wx2-6mvc-gm24, MINI-6xcc-8gc6-2cgr, MINI-6xhq-6fh3-wmq2, MINI-6xrh-4xwx-8h9m, MINI-723x-h436-55w3, MINI-72cr-76xq-v7rg, MINI-72wh-vqq9-hvj7, MINI-73mf-7wmh-7f9r, MINI-73qw-mg2m-gf29, MINI-73rx-r5gj-7fjw, MINI-743p-4f2f-jgjx, MINI-74gc-9mgc-2cj5, MINI-74mj-j38w-jvp7, MINI-74xj-hmfr-2wh5, MINI-759c-mxff-v8ph, MINI-75c5-w8jm-57r3, MINI-75g2-3g93-xhjq, MINI-75gc-m58v-qmpp, MINI-75h7-xpgm-5h8f, MINI-75hp-7228-f2x7, MINI-75w6-cmhp-qf9c, MINI-76hh-f334-mm2c, MINI-773h-838w-qj3w, MINI-77cm-cr93-mf78, MINI-77q3-rhv5-mvrf, MINI-77rq-3pc7-g4cx, MINI-78hf-7vp6-8w46, MINI-799x-4rx8-cc4r, MINI-79q4-h539-m86m, MINI-79v7-p72c-jmp8, MINI-7c7j-mrq2-99j3, MINI-7c7p-66p6-gq64, MINI-7cfr-p3j2-f73c, MINI-7cgx-pg7m-9v6q, MINI-7cpq-285p-v476, MINI-7fj3-w8g3-m28h, MINI-7fq4-mjfx-h87f, MINI-7grj-3wf2-8grp, MINI-7gwq-xv5c-38p6, MINI-7hc5-h8g8-qj22, MINI-7hxc-xmqw-8p99, MINI-7j6x-gg9j-3j44, MINI-7j7h-37h2-hxf6, MINI-7j89-qjhq-g8j7, MINI-7m2w-vm7f-pq93, MINI-7mmr-r357-36rq, MINI-7mwg-hc4m-jpph, MINI-7pg7-f768-wgh6, MINI-7pp4-mjw8-2q62, MINI-7q2g-99cv-j99g, MINI-7q79-xr48-75ph, MINI-7qg4-jcc6-87wj, MINI-7qmc-vcf2-m69m, MINI-7r86-47pv-p5cv, MINI-7rh8-pfg6-49mm, MINI-7rhf-x2vh-m9p5, MINI-7wj2-2f68-wxcr, MINI-7wr9-2rxc-hr26, MINI-7x86-p6hh-f72p, MINI-7xpm-564w-qhjg, MINI-7xrh-c4hc-9jwp, MINI-822v-p6hx-5w6r, MINI-828j-42rf-jpgf, MINI-829w-fcgq-g52g, MINI-82c3-hgxh-ghm5, MINI-82gx-8w5x-mhw3, MINI-832j-xmrf-485v, MINI-8377-hjgr-w9wr, MINI-83h5-8ch9-vv3q, MINI-843j-5p65-h3xc, MINI-84gg-fwwv-2vg8, MINI-84pg-3rrp-vm3x, MINI-85h5-6x2j-22fv, MINI-85mr-fc4f-3c54, MINI-85rr-4x87-hm57, MINI-87vr-r534-45jm, MINI-87xh-gfvm-wv8h, MINI-883r-jwmc-35gm, MINI-883x-w2ch-r49f, MINI-885f-m853-ghcg, MINI-88fr-ffvr-85mg, MINI-895g-wx6r-h8qw, MINI-89h2-9h93-w3h8, MINI-89jm-c89j-c7g3, MINI-89r8-5qrg-x595, MINI-8c2g-v8fc-v3g7, MINI-8c5c-f8vf-qcfm, MINI-8c8g-7chh-f244, MINI-8cmc-vgh9-p68p, MINI-8cxq-mp88-23v3, MINI-8g39-28pp-3292, MINI-8g74-rwrq-cprx, MINI-8gq6-qvw6-f5h7, MINI-8h2r-3826-xpfj, MINI-8hc6-jqqr-5pq8, MINI-8hcr-5qc6-j2q2, MINI-8hxr-rg2r-vx6x, MINI-8jjh-mr5m-vw6c, MINI-8mq9-9673-rwc6, MINI-8pjw-jgj8-845w, MINI-8q3p-f937-q777, MINI-8q76-mg2q-6fvc, MINI-8qp2-f9pc-j829, MINI-8qww-772m-35p4, MINI-8r26-qv9q-h927, MINI-8r6f-pc49-5fmh, MINI-8rgq-h7mg-3w67, MINI-8rx5-72mr-wrxf, MINI-8v28-9xjv-59jq, MINI-8v3q-wcwc-wvvv, MINI-8vfj-h4j3-v2x3, MINI-8w2f-5g9m-vr7j, MINI-8w2q-q5qx-phph, MINI-8wjq-54px-xgw7, MINI-8wp7-f5hg-q2hc, MINI-8wwq-v5c3-2rv8, MINI-8wxp-5j7j-chx9, MINI-8x22-4r49-g52r, MINI-8x9c-77h6-846p, MINI-9226-cr2g-x4j3, MINI-9233-8qjm-cfh9, MINI-938g-7crj-gx56, MINI-93cg-vw5m-2pvr, MINI-94g7-wc53-5487, MINI-94xw-854c-m4q5, MINI-956v-pqxx-wrxp, MINI-95cx-66h9-cfjm, MINI-95gx-67pq-j994, MINI-95qp-3mrx-9qh6, MINI-966v-w737-j2j6, MINI-9699-wqfp-v9xj, MINI-96cr-xjgm-f3rc, MINI-96f2-hh4j-2mv4, MINI-96g8-c2fw-8v83, MINI-96qc-28fw-jh5h, MINI-96vh-qwj9-3jpw, MINI-96w2-j5wc-6fmf, MINI-96xr-8mqr-2cg4, MINI-97rc-rchj-mm35, MINI-987v-jgmq-p7v5, MINI-988m-4599-9cv9, MINI-9957-mxwc-cgpv, MINI-997m-72mx-h9rg, MINI-99f2-jwxh-m792, MINI-99q6-rjfw-g59r, MINI-9cr2-8775-hv84, MINI-9f55-v8qm-m2gw, MINI-9f9q-6xg8-fw59, MINI-9fm5-mphq-m48j, MINI-9fvm-9rjf-6fvx, MINI-9g3h-jwfr-h738, MINI-9gpc-rh27-vwjf, MINI-9gw8-gr8h-58wh, MINI-9h2q-mhv4-g7xj, MINI-9hcq-2w26-h29w, MINI-9j5f-837j-9v2h, MINI-9jcx-rfgw-jp25, MINI-9jvc-f8fv-529r, MINI-9m7r-r6rc-cxwg, MINI-9p8x-q7fj-89cf, MINI-9pv5-wcvf-c783, MINI-9q2m-fw9f-gpp5, MINI-9qh4-2pj2-fgfw, MINI-9r3x-r6q2-34cv, MINI-9rq6-hpjg-2v22, MINI-9v44-ffp9-x65f, MINI-9v8w-2j6j-j6fv, MINI-9xg5-6j3f-xm5x, MINI-9xr5-g92c-x9g2, MINI-c2xp-9h7v-7p9x, MINI-c33w-2w2g-9mh7, MINI-c47p-fj2x-ww4x, MINI-c53c-r9gv-f47h, MINI-c58h-cj5x-w744, MINI-c5px-92xv-4rwx, MINI-c5xv-7m2r-8mw5, MINI-c63h-x65h-hrm2, MINI-c6p3-frp4-ppxc, MINI-c6v4-f6wx-vxmp, MINI-c74w-hx3r-73xq, MINI-c79v-5xpg-99p9, MINI-c7cc-5mv7-m799, MINI-c7q5-9jwp-qxm8, MINI-c874-p4wj-97r9, MINI-c88w-6gmj-5pcq, MINI-c89c-p3q5-mp27, MINI-c8c4-pjc6-5qqg, MINI-c8fj-4qp8-x8c5, MINI-c8m7-4xgj-p7h6, MINI-c96q-j29w-cv95, MINI-c9c8-q6p6-h89w, MINI-c9vq-mj7p-qx33, MINI-cc3x-xj98-r263, MINI-cc4w-j7vc-9rw3, MINI-ccr7-2mff-2fv2, MINI-ccw2-f6xm-g8qc, MINI-cg62-9463-22jm, MINI-cg9c-3qwq-gh48, MINI-cghf-7rx8-m835, MINI-cgw4-r7pj-76rr, MINI-ch3h-ghcj-9mww, MINI-chjc-gmhx-jqrx, MINI-chw9-mjjp-v8hf, MINI-cjh8-5rj7-f356, MINI-cjm5-4f4p-x34q, MINI-cmgj-89pf-gvh5, MINI-cmh8-hcj5-r2c7, MINI-cmvv-8r8q-pcxw, MINI-cp43-276q-frp8, MINI-cp8x-278c-jvj3, MINI-cpcw-ch2m-6q64, MINI-cpr4-vmw4-jr5c, MINI-cq3q-mjj7-g9ch, MINI-cq4w-7x7g-p2fg, MINI-cqc8-27jr-7cr8, MINI-cqcf-v545-gcf8, MINI-cqf9-h3jg-pc7p, MINI-cqfx-9gh6-xpjq, MINI-cqjr-73g8-3qgv, MINI-cqwp-73v9-96fp, MINI-cr2m-fhww-w6rg, MINI-cr59-rhv9-q24c, MINI-cr99-qrh8-mg3w, MINI-crf9-2q9m-4j8v, MINI-crh7-237v-f4jr, MINI-cv4j-v3h4-qh2m, MINI-cv9j-w2j6-ph4p, MINI-cvfh-rvwj-654c, MINI-cvxm-jhrq-vj2p, MINI-cvxr-pwvr-2w36, MINI-cw32-467r-756r, MINI-cw88-mv4j-qgjc, MINI-cwmc-8vvq-hxvw, MINI-cwmj-m6r3-w64w, MINI-cx2g-hqr6-5h99, MINI-f225-gfhm-phpx, MINI-f22w-ch7x-347w, MINI-f3hf-r6cq-xgxr, MINI-f3pc-4w52-36x3, MINI-f46r-x254-4jq3, MINI-f47x-q6rg-4qq6, MINI-f4c9-3vrv-pp2f, MINI-f5wv-6852-wchc, MINI-f668-px32-p2gr, MINI-f693-m25r-h4xh, MINI-f6r4-p7vc-fqwp, MINI-f73q-cw5w-m58w, MINI-f742-3wj9-vx44, MINI-f7vr-7fw8-v9rm, MINI-f827-m695-pr4r, MINI-f8c5-922p-gc9x, MINI-f8gq-929f-cv4p, MINI-f8xq-5qpm-3x5x, MINI-f96p-f6hr-4rfv, MINI-fc2r-8rmf-jfr9, MINI-fc7q-3vfq-392p, MINI-fcfj-pm52-vf58, MINI-fchc-wpw4-rvjg, MINI-ff7g-8hqc-3863, MINI-ff8j-fjf4-cc8c, MINI-ffwr-ffrr-x6gw, MINI-fg3p-3vfx-5vrh, MINI-fg87-f54h-59fg, MINI-fgqx-g5c7-m5h7, MINI-fhpv-h4rp-vjf9, MINI-fhpx-4hj6-wfj2, MINI-fj2v-q335-78gh, MINI-fj6v-44mc-7mvq, MINI-fjjh-v7mh-j95h, MINI-fjp5-r965-hxhg, MINI-fjvc-6649-v4xw, MINI-fm3p-qx4c-c937, MINI-fm52-w389-29xf, MINI-fm7r-w848-r2qw, MINI-fmmv-ppm6-pwxq, MINI-fmr2-f9w8-vw4q, MINI-fphw-6v5g-835v, MINI-fpp7-qfgj-8324, MINI-fq8v-5xxj-h9jw, MINI-fqgc-8hq2-p9c9, MINI-fr4m-9frm-366j, MINI-fv9q-fv23-h5v9, MINI-fvj6-v577-xrm8, MINI-fvmf-wg79-g7c4, MINI-fvvr-g98r-rcm4, MINI-fw48-f2r2-85gc, MINI-fw96-r3m6-j6r4, MINI-fx32-4chp-v98m, MINI-fx5q-g783-gr89, MINI-fxrr-73xr-wjq6, MINI-fxwm-jgvh-5x66, MINI-fxxv-mp54-rx74, MINI-g284-pfhp-wwrf, MINI-g2m8-49hm-8q6p, MINI-g33r-6qvf-fj3f, MINI-g377-chqg-qvq3, MINI-g3mw-x5qg-vfhf, MINI-g3r6-6jxx-vg85, MINI-g3vx-8f4p-p53c, MINI-g47p-2r56-xhh9, MINI-g5f4-3p7q-4hhx, MINI-g5rg-pp4r-qv5g, MINI-g62h-xxh9-c4m7, MINI-g6jv-878j-j85w, MINI-g7jh-f2c8-pc55, MINI-g7v2-x529-r99w, MINI-g87h-4w74-vgx5, MINI-g8h5-ccqh-m3p5, MINI-g9x4-32qw-x933, MINI-gc2v-f82c-x8x9, MINI-gcqg-6pp4-xh77, MINI-gfmv-crfh-rr6r, MINI-gfq7-pr2v-3gv4, MINI-gfxr-5gmj-87jh, MINI-gggg-xvjf-j6pm, MINI-gh4m-4w9j-rf3v, MINI-gh4v-rp7v-hhgj, MINI-gh7m-4xfp-8mmh, MINI-gj46-2rvg-489h, MINI-gjvx-955g-5jjj, MINI-gmhr-5qhc-jrvq, MINI-gp6c-h854-xp5p, MINI-gq47-7rcc-9m9p, MINI-gqmc-23h6-56q7, MINI-gqx3-mq4v-mrw8, MINI-gv9w-jvgx-62h8, MINI-gwxm-h996-8xq6, MINI-gx84-54xr-9pv7, MINI-h23h-w4xm-prq8, MINI-h292-gfhp-pj26, MINI-h2p4-r8jm-74rh, MINI-h2vq-qp7q-fh7r, MINI-h35f-j68g-xqr8, MINI-h3wc-rg5r-w3r8, MINI-h4h5-jp65-87h9, MINI-h4m7-6pr3-6ffw, MINI-h5cm-58x3-7872, MINI-h5f3-c869-q356, MINI-h5h4-3f25-72qj, MINI-h5rh-7j82-q4pg, MINI-h64q-85w7-jhg8, MINI-h6hx-c763-9623, MINI-h6w5-m3gm-q8qh, MINI-h85w-7qxg-wchp, MINI-h887-c27r-w226, MINI-h89q-pc3p-rf96, MINI-h8jf-rv62-cjm9, MINI-h8ww-fxrv-85qm, MINI-h94m-9545-757j, MINI-h9jq-9r3g-h5j5, MINI-hc2x-97v8-pw2f, MINI-hc9r-2jfq-379h, MINI-hcc2-7rcp-3fgm, MINI-hcfc-xfxp-4c2q, MINI-hf2j-gq46-jp8q, MINI-hf9h-75p4-55m2, MINI-hfqr-28xv-mxpg, MINI-hfwr-f7fp-82xq, MINI-hg98-r84j-m48x, MINI-hh7f-2m5c-h25g, MINI-hhp9-3gg8-24vj, MINI-hhq2-7p5f-xj2g, MINI-hhxx-h2j5-fr57, MINI-hj7r-2q6g-8gr2, MINI-hj92-jrmm-55xv, MINI-hm8h-vjm4-jvwr, MINI-hm8r-w782-ghx5, MINI-hmjm-fm6v-pg9v, MINI-hmqf-2wqx-25fx, MINI-hmvq-x83j-xrjp, MINI-hmw8-rg82-qpw7, MINI-hp37-gr8x-fxfg, MINI-hp3j-jxcw-xm7p, MINI-hp88-rhjh-v93j, MINI-hp8j-2597-gfg3, MINI-hqg7-mf5w-j8x2, MINI-hr6r-xhwm-j8rx, MINI-hr8p-8mph-5mpm, MINI-hrc5-767j-3ww2, MINI-hvcf-6xv8-5gv2, MINI-hvhc-3qwq-cf2w, MINI-hvr8-gpqm-4r8r, MINI-hw5j-hrwv-w7gq, MINI-hx3w-mw89-wrw5, MINI-hxjx-v2gr-m7mq, MINI-j239-x6p9-hx63, MINI-j282-7www-mh6r, MINI-j2gc-p5c7-fv86, MINI-j32f-gw6j-qrv7, MINI-j35f-cww7-4phx, MINI-j3rm-8x68-crcx, MINI-j446-8v32-jwvx, MINI-j4r5-xx4j-mjq9, MINI-j5qx-4364-qgwm, MINI-j67f-96pf-667m, MINI-j6p5-3r6f-47pp, MINI-j75w-vf76-gv69, MINI-j76h-qrgr-74g6, MINI-j78j-xcqg-j7f6, MINI-j78r-rmm6-83r6, MINI-j79m-mmf4-jjjh, MINI-j7cf-7mwr-cw39, MINI-j7xm-h5cw-rvjq, MINI-j8h7-j8gw-mh2j, MINI-j8hq-88x5-6x2g, MINI-j933-65w3-xwgm, MINI-j9cj-4fv2-p2pr, MINI-jcqx-mfpp-g549, MINI-jcvj-rp4q-93x5, MINI-jf55-4ww8-9mwp, MINI-jgh3-p43m-pw4g, MINI-jh8c-267g-hvv4, MINI-jj9h-hxg7-7494, MINI-jmr7-72q9-9mvv, MINI-jmxf-999x-2rq4, MINI-jqq4-cv6j-7vqf, MINI-jr23-8h52-8v7r, MINI-jrh3-c6wc-m3xj, MINI-jrv4-w4x4-9376, MINI-jv4j-pmwc-9p77, MINI-jw2p-w34v-g84r, MINI-jw7f-m52f-6582, MINI-jx3c-cwj2-vp8w, MINI-jx6c-m493-4r5h, MINI-m26x-93h2-2jmp, MINI-m2h8-6jwg-v4cm, MINI-m2jr-8q36-x58v, MINI-m2q5-3hpq-hgxh, MINI-m33x-9c22-2wvj, MINI-m3ww-phwr-c3g6, MINI-m4p5-6qmj-jv6v, MINI-m5hv-fv33-953h, MINI-m5p9-h244-f2m5, MINI-m5vp-429f-m734, MINI-m68g-9gmm-jrx7, MINI-m72q-3r9w-4xwf, MINI-m72w-hvjr-q749, MINI-m7f8-jjv3-fmjg, MINI-m7w6-qf2m-58mw, MINI-m88p-q4c7-8559, MINI-m8mv-vwp7-6j95, MINI-m8r4-6c2m-3866, MINI-m924-mp2r-gjgx, MINI-m95q-3cpq-pr6r, MINI-m9rf-mq3v-9rwc, MINI-m9v3-c3g4-93j5, MINI-mc33-7vpm-qw28, MINI-mc72-fvrj-q2vv, MINI-mc9m-jr95-54jv, MINI-mf4w-gw8q-73f5, MINI-mfqf-598r-9ww3, MINI-mfvc-w53p-mr8g, MINI-mgg8-3p5q-9964, MINI-mh7f-59rg-rxg9, MINI-mh8q-4f85-xqw6, MINI-mm69-cp9r-jr3w, MINI-mm6f-xq46-4cfm, MINI-mmq5-3vxp-34hx, MINI-mp2f-j942-5cgv, MINI-mp42-47j6-8w7f, MINI-mp5g-wf67-462j, MINI-mp5q-gv8h-4jjw, MINI-mp89-vc66-j3q6, MINI-mq3g-7hgw-mfvf, MINI-mqm6-h25f-gj96, MINI-mrcp-vxg5-jgg6, MINI-mvjx-vr66-24vf, MINI-mwrg-hw8v-63g2, MINI-mww6-86m2-wxxj, MINI-mx3x-hjrx-fm3x, MINI-mx72-rm8r-rvwx, MINI-p2f8-2w88-6vxx, MINI-p2mh-mw98-ff6f, MINI-p347-5p7p-c5wv, MINI-p35c-hq7w-hqqr, MINI-p3qv-2p22-2vr5, MINI-p52h-vc3m-wpjq, MINI-p55f-52v2-mm5h, MINI-p5x8-rhh4-g74j, MINI-p6fm-25m4-3r87, MINI-p6q6-3vg5-p3mp, MINI-p72w-pvxj-p6x2, MINI-p7v8-5fm2-wf2w, MINI-p845-xmw9-g994, MINI-p884-5jc6-7ff8, MINI-p8q6-25mq-vqwv, MINI-p944-9f59-q8f2, MINI-p97q-74jf-p4x6, MINI-pc9j-fr7f-4768, MINI-pcv5-39gm-r7x8, MINI-pf4v-pfpf-65f3, MINI-ph27-f433-3mhm, MINI-ph6w-3gfv-f6mr, MINI-pj73-x39q-jqvg, MINI-pjpj-4pxc-jf8j, MINI-pmhx-x7cq-72r9, MINI-pphg-6gjf-p6jp, MINI-pq5r-54wh-pfgr, MINI-pqc3-gj24-cpmf, MINI-prm6-xvr3-v7mh, MINI-pv5c-wwfq-9wm7, MINI-pv5q-rccm-xpmh, MINI-pv7w-9fwq-vpgg, MINI-pvwf-qjqg-37j2, MINI-pw3m-r8g8-xj9m, MINI-pwwj-653g-c27j, MINI-px34-6mf5-62h9, MINI-px59-942m-rffq, MINI-pxf3-j5mg-jhjm, MINI-q23q-5xj9-mr6g, MINI-q24r-c8jm-92qm, MINI-q29w-835x-4vr9, MINI-q2q3-6gcj-2m74, MINI-q2rx-px6p-3wh8, MINI-q2wv-2vgc-pvwq, MINI-q366-f674-wwgq, MINI-q3mp-gqfr-vxxc, MINI-q3r7-8965-mqpw, MINI-q3v3-j4mw-vhwq, MINI-q4h2-x77x-rv5c, MINI-q4q4-6jh3-7rcv, MINI-q4v3-q57c-8wxh, MINI-q592-vw28-mcmv, MINI-q5cc-w57r-4j62, MINI-q5f6-jcvm-5pp4, MINI-q6p2-cqmx-4pq7, MINI-q724-c6gm-w999, MINI-q76f-mj7v-fchg, MINI-q7m4-2h4g-798x, MINI-q8f8-26hx-4fv3, MINI-q8mc-m4hj-qj93, MINI-q8pr-c58g-h6vv, MINI-q8q6-27v4-87fg, MINI-q92x-w4fc-9cwq, MINI-q945-9xq7-j9h3, MINI-qc37-xf6c-wqmf, MINI-qc38-3jcv-g6gr, MINI-qc5w-v4fw-v5qx, MINI-qc68-95vw-rjq7, MINI-qcp3-59xp-mjcw, MINI-qfv6-fr45-fqjf, MINI-qfxp-h389-66v2, MINI-qg3g-4f29-fg5h, MINI-qg4p-hcqf-gj74, MINI-qg97-wv58-x3x5, MINI-qg9j-cx3x-rwh6, MINI-qgv4-8fjx-5x99, MINI-qh72-76fq-ffgp, MINI-qhq7-77ww-6cfc, MINI-qj6q-qr7g-3cwm, MINI-qj9m-prpg-6gg2, MINI-qjgw-89gh-gh85, MINI-qm68-gq7m-65fw, MINI-qm84-p4j8-pqgh, MINI-qm98-pj8f-j5c6, MINI-qm99-vq27-xqr9, MINI-qmwf-gqf7-w5c3, MINI-qp9x-h9hj-3x28, MINI-qprq-536q-49g3, MINI-qq5j-ggff-3rqf, MINI-qqcj-wqpp-vfww, MINI-qqv3-37x9-h6cx, MINI-qqx4-r486-7p8x, MINI-qqx8-q264-rv9f, MINI-qrfp-2chf-m5h5, MINI-qrjq-fwc6-fx7v, MINI-qvv5-rh8m-x22j, MINI-qw3m-45vp-8mrx, MINI-qw65-wmhf-99hf, MINI-qw6j-g8pm-49p9, MINI-qw8g-cm7x-qp97, MINI-qwpr-h8jh-hfcw, MINI-qx3f-c72m-w9x4, MINI-qx6m-28c6-h5xm, MINI-qxpv-x594-xc86, MINI-qxxf-h25g-g5x2, MINI-r262-3f2f-cqpr, MINI-r2cc-7mxv-9hgr, MINI-r2fw-hrpp-8m9g, MINI-r2vp-7g37-m947, MINI-r42x-jwr6-j2mj, MINI-r476-8r58-4gj5, MINI-r4j3-rxvw-72j6, MINI-r4j5-487r-452q, MINI-r545-35vx-cpw5, MINI-r59r-jhxv-xv2g, MINI-r5fc-fccr-qp72, MINI-r5x7-f8f6-fm45, MINI-r6j5-5pw4-mhv9, MINI-r6qx-pc47-4ww9, MINI-r77g-fpqg-v5xq, MINI-r7hm-pwm7-mjw8, MINI-r7mg-g464-c45r, MINI-r7xm-7v42-c424, MINI-r93q-h85w-hjmg, MINI-r93v-5v58-993x, MINI-r946-q775-c747, MINI-r976-prc4-rfj9, MINI-r9w6-52xc-6h77, MINI-rf8q-99qc-4vg6, MINI-rf8q-crhw-q7w2, MINI-rg4g-q9c5-p2c2, MINI-rgmv-523c-h65f, MINI-rhhp-2wm6-9g96, MINI-rj2m-6853-wxh4, MINI-rjm9-gg73-grr4, MINI-rm6c-phh5-p2x2, MINI-rp2j-cxqh-xp3q, MINI-rp3g-g4jw-hw95, MINI-rq4q-h2xg-4386, MINI-rq8h-cvrw-f58w, MINI-rq92-mc44-pfm3, MINI-rqpq-2978-f4j9, MINI-rqpw-r8wr-qc22, MINI-rqvp-qff4-pp39, MINI-rr35-xvqv-r68m, MINI-rrj5-7xwq-c7c4, MINI-rrr8-2665-8vgx, MINI-rrw3-28f4-4cr9, MINI-rvmr-qqgx-h6w2, MINI-rwwr-66g3-rmv4, MINI-rx53-7mq3-h8vx, MINI-rxpj-42vc-9p74, MINI-v22r-6g6j-fcmc, MINI-v244-996j-54rw, MINI-v2qg-qxpq-p8wv, MINI-v2rw-9vx6-72cc, MINI-v375-c9p3-fvx6, MINI-v37j-phx4-pw7x, MINI-v3q4-c8wv-ph9v, MINI-v43c-wrg3-49qx, MINI-v476-9jqv-h5hw, MINI-v47m-87c2-qj37, MINI-v4mx-gw95-24cc, MINI-v4r4-wp6j-wpgj, MINI-v5c6-x8mw-9f68, MINI-v5jf-cvg2-jfxv, MINI-v5pc-jg5x-957w, MINI-v6m2-87jc-3389, MINI-v6q5-76r3-gx92, MINI-v754-734w-65j7, MINI-v75w-wfj4-p6v8, MINI-v7ff-7426-49w8, MINI-v7hv-3p6h-8ww6, MINI-v7mf-qcpx-mpjq, MINI-v7r6-v7gf-v9pv, MINI-v86f-6593-g36p, MINI-v87m-g439-5m3m, MINI-v899-vgv3-9qrm, MINI-v8hq-qqf9-q7f6, MINI-v8p5-4p2q-v9hx, MINI-v8r2-947p-jx6x, MINI-v954-rpqj-36cp, MINI-v9m8-wmh3-v8fr, MINI-vc2p-h9gm-hx9q, MINI-vcmg-v4x7-c3q9, MINI-vcmp-fhpc-4hvm, MINI-vcvj-hghh-386w, MINI-vf2h-7jrg-5j6r, MINI-vf3j-8rp5-pphx, MINI-vfh5-q8xm-w2qv, MINI-vg3g-mpgm-w899, MINI-vg5m-rgrr-43pc, MINI-vg65-wmpf-54c8, MINI-vgvq-823r-v425, MINI-vh6v-v6h8-44xq, MINI-vhw3-2vvx-r594, MINI-vj25-f73x-4hq2, MINI-vj5g-77p9-fxwm, MINI-vj67-77c3-ww7p, MINI-vjfg-rv97-m55g, MINI-vjpq-2g7w-5pmp, MINI-vjwv-8qfc-rmq7, MINI-vm3h-cj2q-wj77, MINI-vmqm-xrf4-w993, MINI-vmvh-3vvp-jqfh, MINI-vpm3-6p43-77g4, MINI-vr54-ghqm-pqcq, MINI-vr6x-9jwv-3r4w, MINI-vrcx-c934-pgmh, MINI-vrx6-vj4f-4cr4, MINI-vvcw-f9wv-ph7r, MINI-vvg8-6p34-ph67, MINI-vwh9-gxwj-c6fv, MINI-vwj9-vcq7-vjc6, MINI-vwmv-7hgv-g45g, MINI-vwvg-xc2p-j2hw, MINI-vx6x-39qg-c36w, MINI-vxvf-64x3-7rgm, MINI-vxww-fp4f-7jv6, MINI-w2x5-vh4c-p5wx, MINI-w3fr-8xqx-2m2f, MINI-w3j7-p5h5-7m8m, MINI-w43j-w334-v857, MINI-w45p-7827-43gh, MINI-w493-jhcq-mfvg, MINI-w4m4-p46h-m6pr, MINI-w4m5-rwmm-59hc, MINI-w52m-vmwc-63j6, MINI-w55h-p2c6-pqjf, MINI-w59m-6whm-cjwh, MINI-w6rh-mpm8-266j, MINI-w7r6-v3wm-x9v2, MINI-w824-gvvq-9f55, MINI-w8h9-j2wf-hp28, MINI-w8hw-w2r5-7v5j, MINI-w8vv-9rq9-7vcr, MINI-w9p3-h7j7-5fqq, MINI-w9rx-2235-8wqx, MINI-wcv9-h46x-3qf3, MINI-wcvp-v8jc-pg5r, MINI-wf29-fw84-q3gc, MINI-wf85-2wxq-5jvr, MINI-wf95-f2r7-vw8h, MINI-wfc6-2vqw-h5gw, MINI-wfch-2mjg-c7xw, MINI-wffj-pw6c-x6q5, MINI-wfjw-6p3j-9fm2, MINI-wg92-6vmf-372q, MINI-wgjh-744q-j5f8, MINI-wgqr-8h5w-2m33, MINI-wh3v-wmj6-q7wh, MINI-wh9h-hqjm-pvr4, MINI-whxh-xpmj-8wvp, MINI-wm65-89v5-qg3p, MINI-wm9g-x5c2-46vv, MINI-wmrr-hmpw-9pq4, MINI-wmwr-c272-9jh6, MINI-wp3r-5763-w3wf, MINI-wq82-6r67-qr99, MINI-wqqq-xmpm-96fc, MINI-wr6j-x88g-g5c7, MINI-wrcr-m6rg-cm8h, MINI-wrgq-m83p-mw6r, MINI-wrmx-v855-5335, MINI-wv7m-mwwj-f369, MINI-ww28-4vj4-9pw8, MINI-ww5p-m7c5-qmv3, MINI-ww6m-5wxc-w783, MINI-wwc7-fhmc-x278, MINI-wwf5-w5j4-q55c, MINI-wwqm-4v96-2r2q, MINI-www3-3c79-5w2f, MINI-wxqh-4xf3-x6j7, MINI-x27h-rc26-j2gv, MINI-x29m-w362-rrh4, MINI-x2pm-hfh3-xpgp, MINI-x2qf-w96c-6v5p, MINI-x2xh-5pr3-mvh5, MINI-x37q-6g67-3qm4, MINI-x3m7-3c77-74xg, MINI-x3vr-vhpm-5g4r, MINI-x434-mcwc-jf72, MINI-x46h-2qpr-g42g, MINI-x4v2-wgfp-3837, MINI-x4w6-2m42-3692, MINI-x556-5rj5-8265, MINI-x5r4-qmrp-77vx, MINI-x637-jxjg-fhwc, MINI-x68c-m655-r24r, MINI-x69q-75x4-2583, MINI-x6f9-x632-pfx7, MINI-x78w-jvjf-224g, MINI-x7fj-g3xp-cf56, MINI-x7hp-w89j-xpmf, MINI-x7vp-8vvj-x2w4, MINI-x7vr-pg6w-4mq5, MINI-x8fv-hvm8-4cw6, MINI-x8hq-29h8-qv5c, MINI-x944-vqgm-v8r6, MINI-xc3v-hq9h-p5jr, MINI-xc7g-hwpv-g2rf, MINI-xfrj-5p2j-3m8g, MINI-xgp3-x469-39hm, MINI-xgx5-8v88-hgc5, MINI-xh23-cx9h-cjm6, MINI-xh5v-vx4f-3pj5, MINI-xhq2-xpjq-fcgw, MINI-xj8g-x8v4-m6vc, MINI-xj8q-6f3r-9mq3, MINI-xm8f-qv6c-f693, MINI-xmj3-5c29-hg77, MINI-xmv4-2gpg-fcr4, MINI-xp75-9c58-h8rc, MINI-xp7v-rr38-j9w5, MINI-xpmh-x53v-5fmg, MINI-xpv8-63q2-62cv, MINI-xpwg-x3c4-g6hq, MINI-xq2x-c7gw-r3x9, MINI-xq5w-vjgm-jh7x, MINI-xqm2-h9p4-q5g7, MINI-xqpj-c2hc-hwc8, MINI-xrgf-4jjj-gmx8, MINI-xrwr-4fvh-xfh5, MINI-xrx3-r745-m39p, MINI-xv8p-gxwg-g2mw, MINI-xvr9-r7c8-69mf, MINI-xvx8-j3cg-gh7f, MINI-xw47-pq84-v869, MINI-xwvg-ggvq-wwfr, ROOT-APP-GOBINARY-CVE-2026-39835, UBUNTU-CVE-2026-39835

## What is CVE-2026-39835?

CVE-2026-39835 is a medium-severity vulnerability in golang.org/x/crypto/ssh, published on 22 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

### Official description

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Weakness: CWE-476 (NULL Pointer Dereference), CWE-295 (Improper Certificate Validation)

## Which versions are affected by CVE-2026-39835?

3 open source packages ship an affected version, including golang.org/x/crypto. It affects 1 product.


| Package | Ecosystem | Affected | Fixed in |
| --- | --- | --- | --- |
| `golang.org/x/crypto` | Go | All versions | 0.52.0 |
| `golang.org/x/crypto` | Go | All versions | 0.52.0 |
| `golang.org/x/crypto` | Go | All versions | 0.52.0 |

Products: Golang Crypto.

## How do I fix CVE-2026-39835?

Upgrade golang.org/x/crypto to 0.52.0 or later.

## Is CVE-2026-39835 being exploited?

There is no known exploitation of CVE-2026-39835 in the wild and no public exploit code.

## Other vulnerabilities in golang.org/x/crypto/ssh

- [CVE-2026-46595](https://insights.sbomify.com/CVE-2026-46595/): Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh (critical 10.0)
- [CVE-2026-39830](https://insights.sbomify.com/CVE-2026-39830/): Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh (critical 9.1)
- [CVE-2026-39831](https://insights.sbomify.com/CVE-2026-39831/): Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh (critical 9.1)
- [CVE-2026-39832](https://insights.sbomify.com/CVE-2026-39832/): Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent (critical 9.1)
- [CVE-2026-39833](https://insights.sbomify.com/CVE-2026-39833/): Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (critical 9.1)

## Fix prompt for AI coding agents

```text
Check this codebase for CVE-2026-39835 and fix it if it is affected.

What it is: CVE-2026-39835 is a medium-severity vulnerability in golang.org/x/crypto/ssh, published on 22 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Exploitation: There is no known exploitation of CVE-2026-39835 in the wild and no public exploit code.

Affected packages and fixed versions:
- golang.org/x/crypto (Go): affected all versions; fixed in 0.52.0
- golang.org/x/crypto (Go): affected all versions; fixed in 0.52.0
- golang.org/x/crypto (Go): affected all versions; fixed in 0.52.0

Task:
1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.
2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.
3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.
4. Run the tests and summarise what changed and why.
5. If nothing in the project is affected, say so and change nothing.

Reference: https://insights.sbomify.com/CVE-2026-39835/ (Markdown: https://insights.sbomify.com/CVE-2026-39835/index.md)
```

## Sources

- CVE record: https://www.cve.org/CVERecord?id=CVE-2026-39835
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-39835
- OSV: https://osv.dev/vulnerability/CVE-2026-39835

---
From sbomify Insights: https://insights.sbomify.com/CVE-2026-39835/
Summaries are generated and may contain mistakes; the official description above is the record.