CVE details
CVE-2026-106589
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.
- Score
- 2.9 low
- Published
- 2026-10-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (3)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/openssh-portable | openssh-portable | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-gssapi | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-hpn | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |