This vulnerability arises from libssh's insecure default behavior on Windows systems, where it automatically loads configuration files from the C:\etc directory. Because this directory can be created and modified by unprivileged local users, attackers can exploit this to conduct local man-in-the-middle attacks, downgrade SSH connections, and alter trusted host information. The issue impacts Red Hat Enterprise Linux 10 environments using libssh in this configuration. The CVSS 3.1 score is 7.8, indicating high severity with local attack vector, low attack complexity, and requiring low privileges without user interaction. The vendor advisory does not currently specify a remediation or patch status.

The vulnerability allows local attackers to compromise SSH communications by intercepting or manipulating connections and trusted host data, potentially leading to unauthorized access or disruption of SSH services. The impact affects confidentiality, integrity, and availability of SSH sessions on affected systems configured with the vulnerable libssh library on Windows platforms. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-14821 for current remediation guidance. Until an official fix is available, consider restricting local user permissions to prevent unauthorized modification of the C:\etc directory or altering libssh configuration to avoid loading from insecure paths. Monitor Red Hat communications for updates on patches or official mitigations.