CVE-2026-73281 Security feature bypass in OpenSSH
Remote attackers can bypass local-only restrictions in OpenSSH ssh-agent to add tokens or use keys due to a locking mechanism flaw.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-73281?
CVE-2026-73281 is a low-severity vulnerability in OpenSSH, published on 11 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.
Weakness: CWE-669
Which versions are affected by CVE-2026-73281?
It affects 1 product.
Products include OpenSSH.
How do I fix CVE-2026-73281?
Upgrade to a fixed version.
Is CVE-2026-73281 being exploited?
There is no known exploitation of CVE-2026-73281 in the wild and no public exploit code.
Other vulnerabilities in OpenSSH
Sources
Also known as ALPINE-CVE-2026-73281, AZL-95535, BELL-CVE-2026-73281, DEBIAN-CVE-2026-73281, ECHO-00a9-77b0-b174, GHSA-j58v-28m8-49f3 and 4 more.