medium5.0
CVE-2026-55655
A flaw was found in OpenSSH.
Impact
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | All versions |
| Redhat | Enterprise Linux | Versions 6.0, 7.0, 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2026:36759
- https://access.redhat.com/errata/RHSA-2026:47755
- https://access.redhat.com/errata/RHSA-2026:47756
- https://access.redhat.com/errata/RHSA-2026:47757
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:76748
- https://access.redhat.com/errata/RHSA-2026:76993
- https://access.redhat.com/errata/RHSA-2026:80513
- https://access.redhat.com/errata/RHSA-2026:82749
- https://access.redhat.com/errata/RHSA-2026:82750
- https://access.redhat.com/errata/RHSA-2026:82751
- https://access.redhat.com/errata/RHSA-2026:82752
- https://access.redhat.com/errata/RHSA-2026:82753
- https://access.redhat.com/errata/RHSA-2026:82754
- https://access.redhat.com/errata/RHSA-2026:82755
- https://access.redhat.com/errata/RHSA-2026:82756
- https://access.redhat.com/errata/RHSA-2026:82757
- https://access.redhat.com/errata/RHSA-2026:82758
- https://access.redhat.com/errata/RHSA-2026:82759
- https://access.redhat.com/errata/RHSA-2026:82761
- https://access.redhat.com/errata/RHSA-2026:82762
- https://access.redhat.com/errata/RHSA-2026:82763
- https://access.redhat.com/errata/RHSA-2026:82897
- https://access.redhat.com/errata/RHSA-2026:82898