VulnerabilityPublished
OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years
Source SecurityWeek
0
Mentioned vulnerabilities
Fixed in 10.3 : update affected systems when convenient.
Data as of 28 Apr 2026, 06:13 UTC
Severity
MediumRated by Threat Radar
- Patch
- Available – fixed in 10.3
What to do
AI-suggested
A fix for this vulnerability is available in OpenSSH version 10.3 released in early April 2026. Organizations should audit their environments to identify affected OpenSSH versions and update to version 10.3 or later as soon as possible. No alternative mitigations are indicated. Patch status is confirmed by the vendor advisory.
Description
A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators. The post OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years appeared first on SecurityWeek .
References
Community reviews
Loading reviews…