CVE-2025-61984

Published: Oct 6, 2025Modified: Jul 14, 2026Deferred

3.6

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.0 / Impact: 2.5

Source: MITRE (Secondary)

Description

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Related CWEs

Improper Handling of Invalid Use of Special Elements

The product does not properly filter, remove, quote, or otherwise manage the invalid use of special elements in user-controlled input, which could cause adverse effect on its behavior and integrity.

References (9)

https://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2

Source: cve@mitre.org

https://www.openssh.com/releasenotes.html#10.1p1

Source: cve@mitre.org

https://www.openwall.com/lists/oss-security/2025/10/06/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2025/10/07/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2025/10/12/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.vicarius.io/vsociety/posts/cve-2025-61984-detection-script-remote-code-execution-vulnerability-affecting-openssh

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.vicarius.io/vsociety/posts/cve-2025-61984-mitigation-script-remote-code-execution-vulnerability-affecting-openssh

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/html/ssa-019113.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.