Search: CVE-2026-106582

CVE-2026-106582 is a low-severity vulnerability in OpenSSH versions before 10.6 where the use of an LZ77 dictionary coder creates a covert channel risk. This issue relates to CWE-514, involving unintended information flow. The vulnerability is based on findings from the arXiv paper 2609.07709 "Crossing the Streams". No known exploits are reported in the wild. The vulnerability affects OpenSSH versions from initial releases up to but not including 10.6.