This vulnerability arises from libssh's insecure default behavior on Windows platforms, where configuration files are automatically loaded from the C:\etc directory. Because this directory can be created and modified by unprivileged local users, attackers can manipulate trusted host information, leading to local man-in-the-middle attacks and security downgrades of SSH connections. The issue affects Red Hat Hardened Images that include this libssh configuration. The Red Hat advisory linked does not currently provide explicit patch or fix information for this vulnerability.

The vulnerability allows local attackers with limited privileges to perform man-in-the-middle attacks and downgrade the security of SSH connections by manipulating trusted host information. This compromises the confidentiality, integrity, and availability of SSH communications on affected systems. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-14821 for current remediation guidance. The vendor advisory does not currently list a fix or update addressing this vulnerability. Until a patch is available, users should consider restricting local access to the affected systems and monitor for updates from Red Hat.