CVE-2026-44423

Published: May 13, 2026Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated user can read session records (SSH username, device UID, remote IP, terminal type, authenticated flag, timestamps) belonging to any other namespace. This vulnerability is fixed in 0.24.2.

Affected (1)

Products: Shellhub: Shellhub

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Shellhub Shellhub	Before 0.24.2

Related CWEs

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

https://github.com/shellhub-io/shellhub/security/advisories/GHSA-9w9c-9w8m-w89q

Source: security-advisories@github.com

ExploitVendor Advisory

https://github.com/shellhub-io/shellhub/security/advisories/GHSA-9w9c-9w8m-w89q

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitVendor Advisory

Timeline

No history available yet.