CVE-2026-106586

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: MITRE

Description

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106586

Affected Vendors & Products

Vendor	Product	Version / Range
openbsd	openssh	to 10.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-670	The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

Attack-Flow Graph

Executive Summary

This vulnerability in OpenSSH before version 10.6 allows the restrict keyword in authorized_keys to be bypassed for tunnel forwarding. The restrict keyword is meant to limit what a key can do, but due to this flaw, it fails to apply restrictions properly.

Detection Guidance

This vulnerability can be detected by checking the OpenSSH version on your system. If it is before 10.6, the system is vulnerable. Use the command 'ssh -V' to check the version.

Impact Analysis

An attacker with access to a restricted SSH key could use it to set up unauthorized tunnel forwarding, potentially bypassing intended access controls. This could lead to data leaks or unauthorized network access.

Compliance Impact

This vulnerability could lead to unauthorized access or data exfiltration, violating confidentiality requirements in GDPR and HIPAA. Organizations using vulnerable OpenSSH versions may fail compliance audits.

Mitigation Strategies

Update OpenSSH to version 10.6 or later to address the restrict keyword vulnerability in authorized_keys for tunnel forwarding.

Hi! I’m here to help you understand CVE-2026-106586. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70