CVE-2026-106583

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-07

Last updated on: 2026-10-15

Assigner: MITRE

Description

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-07

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106583

EUVD

EUVD-2026-94104

Affected Vendors & Products

Vendor	Product	Version / Range
openbsd	openssh	to 10.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-99	The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.

Attack-Flow Graph

Executive Summary

This vulnerability exists in OpenSSH before version 10.6. It allows a $ or \ character to appear in a command-line username, which can lead to command injection. This means an attacker could potentially execute unauthorized commands on the affected system by manipulating the username field.

Detection Guidance

This vulnerability involves command injection via special characters in usernames. To detect it, inspect SSH logs for unusual usernames containing $ or \ characters. Check OpenSSH version with 'ssh -V' and compare against 10.6 or later. Review authentication logs for failed login attempts with suspicious usernames.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to run arbitrary commands on your system. This might lead to unauthorized data access, system compromise, or further network infiltration. The impact is limited to local users due to the low attack complexity and privileges required.

Compliance Impact

This vulnerability could potentially violate compliance requirements that mandate secure authentication and access control, such as GDPR (data protection) or HIPAA (health data security). Exploitation might lead to unauthorized access, data breaches, or compromised systems, triggering regulatory penalties or audit failures.

Mitigation Strategies

Upgrade OpenSSH to version 10.6 or later to address the command-line username injection vulnerability.

Hi! I’m here to help you understand CVE-2026-106583. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70