Search: CVE-2026-56854

CVE-2026-56854 is a high-severity authorization vulnerability in the golang.org/x/crypto/ssh package. The flaw involves incorrect enforcement of the source-address restriction in authentication callbacks, where this restriction was only applied to some authentication paths but ignored in others. This inconsistency could allow unauthorized access if source-address restrictions are used as a security control.