CVE-2026-73282

Awaiting Analysis Awaiting Analysis - Queue

Use-After-Free in OpenSSH Remote Forwarding

Publication date: 2026-08-11

Last updated on: 2026-08-31

Assigner: MITRE

Description

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-31

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-73282

EUVD

EUVD-2026-56891

Affected Vendors & Products

Vendor	Product	Version / Range
openssh	openssh	to 10.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is a use-after-free issue in OpenSSH before version 10.5. It occurs when two remote-forwarding operations happen at the same time, causing the program to improperly handle memory reallocation. This can lead to memory corruption and potential unintended behavior.

Detection Guidance

This vulnerability is specific to OpenSSH versions before 10.5 and involves a use-after-free condition during concurrent remote-forwarding operations. Detection requires checking the OpenSSH version on your system. Use the command 'ssh -V' to verify the installed version. If the version is below 10.5, the system is potentially vulnerable.

Impact Analysis

An attacker could exploit this to cause a denial of service or execute arbitrary code on the affected system. This may allow unauthorized access or control of the server running the vulnerable OpenSSH version.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance standards like GDPR or HIPAA. The vulnerability involves a use-after-free issue in OpenSSH's remote-forwarding operations, which could lead to unauthorized access or data leakage. Such issues may indirectly affect compliance by compromising data integrity or confidentiality, but no explicit details are provided.

Mitigation Strategies

Upgrade OpenSSH to version 10.5 or later to address the use-after-free vulnerability in remote-forwarding operations.

Hi! I’m here to help you understand CVE-2026-73282. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70