CVE-2026-106589

2.9 LOW

Published 2026-10-06 · Updated 2026-10-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE-272

All references

https://www.openssh.org/releasenotes.html#10.6

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-103504PoC
HIGHCVE-2026-81452

Related by shared AI tags and CWE weakness class. Browse the full archive.