What is GHSA-h54q-2vm3-97qv?

GHSA-h54q-2vm3-97qv is a security advisory published by GitHub Security Advisories with Medium severity. A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or...

Which CVE IDs does GHSA-h54q-2vm3-97qv cover?

GHSA-h54q-2vm3-97qv covers the following CVE IDs: CVE-2026-110925. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h54q-2vm3-97qv?

GHSA-h54q-2vm3-97qv has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-h54q-2vm3-97qvMediumCVSS 5.4

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-110925 →

📋 Description

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-110925
https://access.redhat.com/security/cve/CVE-2026-110925
https://bugzilla.redhat.com/show_bug.cgi?id=2553034
https://access.redhat.com/errata/RHSA-2026:82247
https://github.com/advisories/GHSA-h54q-2vm3-97qv