PuTTY versions from 0.65-2 through 0.84-1 use a copy of the PuTTY icon as a trust indicator for TELNET data, but the trust status is not cleared between proxy authentication and the main session. This could lead to misleading trust indications in the user interface. The vulnerability has a medium severity with a CVSS score of 3.1.