CVE-2026-59851CWE-863broken-access-control

CVE-2026-59851

High · published July 21, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-21T19:16Z
Affected products (3)
ProductVersionsFixed in
libssh/libsshall versions—
redhat/hardened_imagesall versions—
redhat/enterprise_linuxall versions—
References (4)
https://access.redhat.com/errata/RHSA-2026:42922 · [email protected]https://access.redhat.com/errata/RHSA-2026:55855 · [email protected]https://access.redhat.com/security/cve/CVE-2026-59851 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2498184 · [email protected]
EPSS history
Timeline
  • 21 JUL 14:20Z
    Libssh: libssh: authentication bypass via missing gssapi principal check
    cvelistv5