Repository navigation
CVE-2026-106589 (Low) detected in src4.0.4 #532
Description
CVE-2026-106589 - Low Severity Vulnerability
Vulnerable Library - src4.0.4
MidnightBSD OS source code
Library home page: https://github.com/MidnightBSD/src.git
Found in base branches: stable/4.0, master
Vulnerable Source Files (1)
Vulnerability Details
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.
Publish Date: 2026-10-06
URL: CVE-2026-106589
CVSS 3 Score Details (2.9)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: Low
- Availability Impact: None
Step up your Open Source Security Game with Mend here
Activity
[-]CVE-2026-106589 (Low) detected in freebsd-srcrelease/15.0.0-p7[/-][+]CVE-2026-106589 (Low) detected in src4.0.4[/+][-]CVE-2026-106589 (Low) detected in src4.0.4[/-][+]CVE-2026-106589 (Low) detected in freebsd-srcrelease/15.0.0-p7[/+][-]CVE-2026-106589 (Low) detected in freebsd-srcrelease/15.0.0-p7[/-][+]CVE-2026-106589 (Low) detected in src4.0.4[/+][-]CVE-2026-106589 (Low) detected in src4.0.4[/-][+]CVE-2026-106589 (Low) detected in freebsd-srcrelease/15.0.0-p7[/+][-]CVE-2026-106589 (Low) detected in freebsd-srcrelease/15.0.0-p7[/-][+]CVE-2026-106589 (Low) detected in src4.0.4[/+]laffer1 commentedon Nov 6, 2026
fixed