NetSight
IP …
medium6.3

CVE-2026-39828

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially droppi…

Impact

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

Affected packages

EcosystemPackageAffectedFixed in
gogolang.org/x/crypto< 0.52.00.52.0

Affected products

VendorProductAffected versions
GolangCrypto
before 0.52.0

Weakness classification

CWE-281CWE-295

References