Low
Security advisory
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-73281
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 08:42 UTC · Revision 1
Source evidence
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
osv:CVE-2026-73281
Complete source record
{
"id": "41e8e7130f54be8baeeb322fa8c2b5f9bd5e2ff2861c6bd47311de90f0ca863f",
"url": "https://osv.dev/vulnerability/CVE-2026-73281",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2026-73281",
"summary": "In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.",
"evidence": "osv:CVE-2026-73281",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2026-73281",
"aliases": [
"CVE-2026-73281"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/openssh/openssh-portable",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "b3f7344209832eea8ece447d871ea748767c444b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "10.5"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"V_9_5_P1",
"V_9_2_P1",
"V_9_7_P1",
"V_9_6_P1",
"V_9_3_P1",
"V_9_1_P1",
"V_9_0_P1",
"V_8_9_P1",
"V_8_8_P1",
"V_8_7_P1",
"V_8_6_P1",
"V_8_5_P1",
"V_8_4_P1",
"V_8_2_P1",
"V_8_1_P1",
"V_8_0_P1",
"V_7_9_P1",
"V_7_8_P1",
"V_7_7_P1",
"V_7_6_P1",
"V_7_5_P1",
"V_7_4_P1",
"V_7_3_P1",
"V_7_2_P1",
"V_7_1_P1",
"V_7_0_P1",
"V_6_9_P1",
"V_6_8_P1",
"V_6_6_P1",
"V_6_5_P1",
"V_6_2_P1",
"V_6_1_P1",
"V_6_0_P1",
"V_5_7_P1",
"V_5_5_P1",
"V_5_2_P1",
"V_5_1_P1",
"V_5_0_P1",
"V_4_2_P1",
"V_3_9_P1",
"V_3_8_P1",
"AFTER_KRB5_GSSAPI_MERGE",
"BEFORE_KRB5_GSSAPI_MERGE",
"POST_KRB4_REMOVAL",
"PRE_KRB4_REMOVAL",
"AFTER_FREEBSD_PAM_MERGE",
"BEFORE_FREEBSD_PAM_MERGE",
"V_3_6_1_P1",
"V_3_4_P1",
"V_3_2_2_P1",
"PRE_SW_KRBV",
"V_3_1_P1",
"V_3_0_1_P1",
"V_3_0_P1",
"V_2_5_2_P1",
"V_2_5_1_P2",
"V_2_5_1_P1",
"V_2_5_0_P1",
"PRE-REORDER",
"V_2_3_0_P1",
"PRE_CYGWIN_MERGE",
"V_2_2_0_P1",
"V_2_1_1_P4",
"V_2_1_1_P3",
"ABOUT_TO_ADD_INET_ATON",
"V_2_1_1_P2",
"V_2_1_1_P1",
"PRE_NEW_LOGIN_CODE",
"V_2_1_0_P3",
"V_2_1_0_P2",
"V_2_1_0_P1",
"V_2_1_0",
"V_2_0_0_BETA2",
"V_2_0_0_BETA1",
"V_2_0_0_TEST1",
"V_1_2_3_TEST3",
"V_1_2_3_TEST2",
"V_1_2_3_TEST1",
"V_1_2_3",
"V_1_2_3_PRE5",
"V_1_2_3_PRE4",
"V_1_2_3_PRE3",
"V_1_2_3_PRE2",
"V_1_2_3_PRE1",
"V_1_2_2_P1",
"V_1_2_2",
"V_1_2_2_PRE29",
"V_1_2_2_PRE28",
"V_1_2_1_PRE27",
"V_1_2_1_PRE26",
"PRE_IPV6",
"V_1_2_1_PRE25",
"V_1_2_1_PRE24",
"V_1_2_1_PRE23",
"V_1_2_1_PRE22",
"PRE_FIXPATHS_INTEGRATION",
"V_1_2_1_PRE21",
"V_1_2_1_PRE20",
"V_1_2_1_PRE19",
"PRE_HPUX_INTEGRATION",
"V_1_2_1_PRE18",
"V_1_2PRE17",
"V_1_2_PRE16",
"V_1_2_PRE15",
"V_1_2_PRE14",
"V_1_2_PRE13",
"V_1_2_PRE12",
"V_1_2_PRE11",
"V_1_2_PRE10",
"V_1_2_PRE9",
"V_1_2_PRE8",
"V_1_2_PRE7",
"V_1_2_PRE6",
"V_1_2_PRE5",
"V_1_2_PRE4",
"PRE_DAN_PATCH_MERGE"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73281.json"
}
}
],
"modified": "2026-10-28T02:30:34.008390505Z",
"provider": "osv",
"references": [
"https://www.openssh.org/releasenotes.html#10.5",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73281.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73281"
],
"provider_metadata": {
"cwe_ids": [
"CWE-669"
],
"cna_assigner": "mitre",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "10.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73281.json"
}
},
"related_cves": [
{
"value": "CVE-2026-73281",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 501188,
"published_at": "2026-08-11T19:10:33.079+00:00"
}