A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, a…

High CVSS 8.8

CVECVE-2026-59851

First seen2026-08-17 23:15 UTC

Disclosed2026-07-21 15:16 UTC

Last updated2026-08-17 23:15 UTC

Channel statusauto

Summary

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://access.redhat.com/errata/RHSA-2026:42922 Issue Tracking
https://access.redhat.com/errata/RHSA-2026:55855
https://access.redhat.com/security/cve/CVE-2026-59851 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2498184 Issue Tracking

Timeline

2026-08-17 nvd_ingest NVD