CVE-2026-128088 | Eugeny russh up to 0.65.0 SSH Agent Protocol try_sign toctou

November 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Eugeny russh up to 0.65.0. Affected by this vulnerability is the function try_sign of the component SSH Agent Protocol. Executing a manipulation can lead to time-of-check time-of-use.

This vulnerability is tracked as CVE-2026-128088. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More