CVE-2025-61985 is a vulnerability in OpenSSH versions prior to 10.1 where the ssh client improperly handles the '\0' (null byte) character in ssh:// URIs. This improper neutralization can lead to potential code execution when a ProxyCommand is configured. The vulnerability is categorized under CWE-158. The CVSS 3.1 base score is 3.6, reflecting low severity with local attack vector, high attack complexity, low privileges required, no user interaction, and limited confidentiality and integrity impact.

The vulnerability may allow an attacker with local access and the ability to influence ssh:// URIs to execute arbitrary code via a crafted URI when a ProxyCommand is used. The impact is limited to confidentiality and integrity with no availability impact. Given the low CVSS score and lack of known exploits, the risk is considered low.

No official patch or remediation information is provided in the available data. Users should upgrade to OpenSSH version 10.1 or later once a fix is released. Until then, avoid using untrusted ssh:// URIs with ProxyCommand configurations. Monitor the OpenBSD vendor advisories for updates and apply official fixes when available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.