SSH-AGENT Performs Remote Ops in OpenSSH <10.5 (session-bind)
CVE-2026-73281 Published on August 11, 2026
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
Vulnerability Analysis
CVE-2026-73281 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.
Weakness Type
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
Products Associated with CVE-2026-73281
Want to know whenever a new CVE is published for OpenBSD OpenSSH? stack.watch will email you.
Affected Versions
OpenBSD OpenSSH:- Before 10.5 is affected.