CVE-2025-47913

HIGH7.5

JSON export Create alert

Description

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products

Go / ssh0.43.0
golang.org/x/crypto / golang.org/x/crypto/ssh/agent0 – 0.43.0

References

MISChttps://go.dev/cl/700295
MISChttps://go.dev/issue/75178
VENDOR_ADVISORYhttps://github.com/advisories/GHSA-56w8-48fp-6mgv
MISChttps://pkg.go.dev/vuln/GO-2025-4116

Updated 37m ago · 8 sources