low2.9
CVE-2026-106589
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges.
Impact
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenSSH | OpenSSH | through 10.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.