CVE-2026-128087 | Eugeny russh up to 0.65.0 SSH Agent Protocol kex_done certificate validation

November 13, 2026 Yanac

A vulnerability marked as problematic has been reported in Eugeny russh up to 0.65.0. Affected by this issue is the function client::Handler::kex_done of the component SSH Agent Protocol. The manipulation leads to improper certificate validation.

This vulnerability is listed as CVE-2026-128087. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More