SSH Auth PartialSuccessError Permissions Discarded (golang.org/x/crypto/ssh <0.52.0)
CVE-2026-39828 Published on May 22, 2026
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
Vulnerability Analysis
CVE-2026-39828 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Confidentiality Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
Improper Preservation of Permissions
The software does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Products Associated with CVE-2026-39828
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
golang.org/x/crypto/ssh:
-
Before 0.52.0
is affected.
Red Hat
RHEM 1.0 for RHEL 9:
-
Version 0:1.0.3-1.el9em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 10:
-
Version 0:1.1.3-1.el10em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 9:
-
Version 0:1.1.3-1.el9em and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782400868 and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782401674 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.6:
-
Version 1783332008 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.6:
-
Version 1783333268 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.6:
-
Version 1783025820 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502465 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502025 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502494 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502401 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502403 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502023 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502029 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502445 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194638 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194353 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784196588 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784195620 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194309 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194188 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194653 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194980 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194347 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194971 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128388 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128860 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126780 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127787 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126832 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126774 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127791 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127135 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126733 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127775 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057515 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057529 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057884 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783058067 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057868 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783058284 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612432 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611973 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612714 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611805 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1784121108 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612119 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612163 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932114 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782931768 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932104 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536000 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783535989 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536515 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932521 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018461 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018421 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932812 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537001 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932919 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537586 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932969 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933015 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933042 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537392 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933235 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933251 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537955 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933417 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537742 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933602 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783019377 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934054 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934036 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934284 and below *
is unaffected.
Red Hat Quay 3.1:
-
Version 1783750447 and below *
is unaffected.
Red Hat Quay 3.16:
-
Version 1783955846 and below *
is unaffected.
Red Hat Quay 3.9:
-
Version 1784125838 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968508 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783961973 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783959819 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968972 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 4-1.4.2 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330691 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332061 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326847 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783183848 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782992727 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782903492 and below *
is unaffected.
Assisted Installer for Red Hat OpenShift Container Platform 2:
cert-manager Operator for Red Hat OpenShift:
cert-manager Operator for Red Hat OpenShift:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Cryostat 4:
External Secrets Operator for Red Hat OpenShift:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift Pipelines:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Security 4:
Red Hat Advanced Cluster Security 4:
Red Hat Advanced Cluster Security 4:
Red Hat Ceph Storage 9:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat Openshift Data Foundation 4:
Red Hat Openshift Data Foundation 4:
Red Hat OpenShift Dev Spaces:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift on AWS:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 18.0:
Red Hat OpenStack Platform 18.0:
Red Hat Quay 3:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat
Security Profiles Operator:
Red Hat
Security Profiles Operator:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.
