AZL-95535

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95535.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-95535

Upstream

CVE-2026-73281

Published

2026-08-11T20:18:49Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-73281 affecting package openssh 9.8p1-9

Details

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-73281

Affected packages

Azure Linux:3 / openssh

Package

Name: openssh
Purl: pkg:rpm/azure-linux/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

9.8p1-9

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95535.json"