Medium severity5.4NVD Advisory· Published Oct 15, 2026
CVE-2026-110925
CVE-2026-110925
Description
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.