The russh client improperly processes channel messages from an SSH server without verifying that the channel number belongs to a channel the client opened and the server confirmed. This allows a malicious or compromised SSH server to send messages for arbitrary channel numbers, potentially causing the client application to record incorrect channel states or panic. The issue is fixed in russh version 0.63.1, which adds proper checks to ignore messages for unestablished channels.