CVE-2026-35388

LOW

OpenSSH < 10.3 - Unprotected Alternate Channel via Proxy-Mode Multiplexing

Title source: llm

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Core 3

Core References

CVSS v3 2.5

EPSS 0.0002

EPSS Percentile 5.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-420

Status published

Products (2)

OpenBSD/OpenSSH < 10.3

openbsd/openssh < 10.3

Published Apr 02, 2026

Tracked Since Apr 02, 2026