Connection Multiplexing Confirmation Bypass in OpenSSH Before

Publication date: 2026-04-02

Last updated on: 2026-04-27

Assigner: MITRE

Description

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-02

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2026-04-02

EPSS Evaluated

2026-07-05

NVD

CVE-2026-35388

EUVD

EUVD-2026-18404

Affected Vendors & Products

Vendor	Product	Version / Range
openbsd	openssh	to 10.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-420	The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Attack-Flow Graph

Executive Summary

This vulnerability exists in OpenSSH versions before 10.3 where the software omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Impact Analysis

The vulnerability has a low severity score (CVSS 2.5) and involves a lack of confirmation in connection multiplexing for proxy-mode sessions. This could potentially lead to limited impact such as unauthorized session multiplexing or minor integrity issues, but it does not affect confidentiality or availability.

Hi! I’m here to help you understand CVE-2026-35388. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70