CVE-2026-106586 | OpenBSD OpenSSH up to 10.5 Tunnel Forwarding authorized_keys improper authorization

October 6, 2026 Yanac

A vulnerability has been found in OpenBSD OpenSSH up to 10.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file authorized_keys of the component Tunnel Forwarding. Performing a manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-106586. The attack is only possible with local access. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More