A vulnerability in golang.org/x/crypto/ssh/agent allows a panic due to out of bounds read when processing malformed new identity request messages. This occurs because the SSH Agent server does not validate message sizes properly. The issue affects versions prior to 0.45.0 and has a medium severity rating with a CVSS score of 5.3.