This vulnerability in libssh affects Red Hat Enterprise Linux 10 and arises from improper AES-GCM finalization checks in builds that use the OpenSSL backend. The flaw effectively disables integrity protection, enabling an attacker positioned in the communication path to alter plaintext data undetected. The CVSS 3.1 vector indicates the attack requires network access with high attack complexity and no privileges or user interaction, impacting integrity but not confidentiality or availability. No known exploits are reported, and no official patch or remediation level has been provided in the vendor advisory as of the publication date.

The vulnerability allows an attacker with network access to modify plaintext transmitted over libssh connections without detection, compromising data integrity. Confidentiality and availability are not affected according to the CVSS vector. This could undermine trust in communications relying on libssh with the OpenSSL backend on affected Red Hat Enterprise Linux 10 systems.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-59847 for current remediation guidance. Until an official fix is available, consider limiting exposure of affected libssh services to untrusted networks or using alternative secure communication methods where feasible.