OpenSSH versions before 9.6p1-25.oe2403sp1 contain a vulnerability where the configuration option value "none" is sometimes incorrectly interpreted as a filename instead of disabling a feature. This issue has been fixed in version 9.6p1-25.oe2403sp1.