CVE-2025-5372 | libssh up to 0.11.1 ssh_kdf privilege escalation

June 28, 2025 Yanac

A vulnerability, which was classified as problematic, was found in libssh up to 0.11.1. This affects the function ssh_kdf. The manipulation leads to privilege escalation.

This vulnerability is uniquely identified as CVE-2025-5372. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More