What is GHSA-j58v-28m8-49f3?

GHSA-j58v-28m8-49f3 is a security advisory published by GitHub Security Advisories with Low severity. In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...

Which CVE IDs does GHSA-j58v-28m8-49f3 cover?

GHSA-j58v-28m8-49f3 covers the following CVE IDs: CVE-2026-73281. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j58v-28m8-49f3?

GHSA-j58v-28m8-49f3 has a CVSS v3 base score of 3.5, published by GitHub Security Advisories.

GHSA-j58v-28m8-49f3LowCVSS 3.5

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...

Vendor

GitHub Security Advisories

Published

August 11, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-73281 →

📋 Description

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-73281
https://www.openssh.org/releasenotes.html#10.5
https://github.com/advisories/GHSA-j58v-28m8-49f3