This vulnerability arises from libssh automatically loading configuration files from the C:\etc directory on Windows systems, which can be created or modified by unprivileged local users. This uncontrolled search path element enables local attackers to manipulate SSH connections by performing man-in-the-middle attacks, security downgrades, and trusted host information tampering. The issue affects Red Hat Hardened Images but no specific affected versions are listed. The CVSS 3.1 vector indicates local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

The vulnerability allows local attackers to compromise SSH communications by intercepting or downgrading connections and altering trusted host data, which can lead to significant breaches of confidentiality, integrity, and availability of SSH sessions on affected Windows systems using Red Hat Hardened Images with libssh. No known exploits in the wild have been reported to date.

The vendor advisory linked does not explicitly state the availability of a patch or workaround for this vulnerability. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-14821 for current remediation guidance. Until an official fix is available, restrict local user permissions to prevent unauthorized modification of the C:\etc directory and monitor for suspicious local activity related to SSH configuration files.