{"id":"EUVD-2026-89207","enisaUuid":"13246290-6c0b-3f7f-b2ec-4050696a5d7b","description":"Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in both server_dh and compute_shared_secret, forcing the X25519 contribution to the combined shared secret to zero. A malicious SSH peer can therefore make the combined secret depend only on ML-KEM, defeating the hybrid exchange\u0027s intended fallback protection if ML-KEM is later weakened. This issue is fixed in version 0.63.0.","datePublished":"Sep 29, 2026, 6:27:41 PM","dateUpdated":"Sep 30, 2026, 8:24:58 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/Eugeny/russh/security/advisories/GHSA-w3jg-pjxf-73p4\nhttps://github.com/Eugeny/russh/commit/8da8967f196472576b1565d518a0ed60fce60f0c\nhttps://github.com/Eugeny/russh/releases/tag/v0.63.0\n","aliases":"CVE-2026-102824\nGHSA-w3jg-pjxf-73p4\n","assigner":"GitHub_M","epss":0.14,"enisaIdProduct":[{"id":"ba08b0e2-9782-3998-9525-acb7dbff1df7","product":{"name":"russh","vendor":{"name":"Eugeny"}},"product_version":"\u003c 0.63.0"}],"enisaIdVendor":[{"id":"8a9affe3-aeeb-3338-b5e4-cbd7a014e9e6","vendor":{"name":"Eugeny"}}],"enisaIdVulnerability":[{"id":"4f1a324d-0179-385b-acfe-8bc766b3ba74","vulnerability":{"id":"CVE-2026-102824","description":"Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in both server_dh and compute_shared_secret, forcing the X25519 contribution to the combined shared secret to zero. A malicious SSH peer can therefore make the combined secret depend only on ML-KEM, defeating the hybrid exchange\u0027s intended fallback protection if ML-KEM is later weakened. This issue is fixed in version 0.63.0.","datePublished":"Sep 29, 2026, 6:27:41 PM","dateUpdated":"Sep 30, 2026, 8:24:58 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/Eugeny/russh/security/advisories/GHSA-w3jg-pjxf-73p4\nhttps://github.com/Eugeny/russh/commit/8da8967f196472576b1565d518a0ed60fce60f0c\nhttps://github.com/Eugeny/russh/releases/tag/v0.63.0\n","enisa_id":"EUVD-2026-89207\n","assigner":"GitHub_M","epss":0.14,"dataProcessed":"Nov 11, 2026, 7:20:40 AM","vulnerabilityProduct":[{"id":"884851c2-fa75-3a4c-b2e0-2afba9ac6b29","product":{"name":"russh","vendor":{"name":"Eugeny"}},"product_version":"\u003c 0.63.0"}],"vulnerabilityVendor":[{"id":"40244133-04b3-33d4-a4f3-d739f3d76cc0","vendor":{"name":"Eugeny"}}]}},{"id":"f606b143-63fe-305c-bca6-fda62682003a","vulnerability":{"id":"GHSA-w3jg-pjxf-73p4","description":"Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange","datePublished":"Sep 30, 2026, 11:26:48 PM","dateUpdated":"Sep 30, 2026, 11:26:48 PM","baseScore":0.0,"references":"https://github.com/Eugeny/russh/security/advisories/GHSA-w3jg-pjxf-73p4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-102824\nhttps://github.com/Eugeny/russh/commit/8da8967f196472576b1565d518a0ed60fce60f0c\nhttps://github.com/Eugeny/russh\nhttps://github.com/Eugeny/russh/releases/tag/v0.63.0\n","enisa_id":"EUVD-2026-89207\n","aliases":"CVE-2026-102824\nGHSA-w3jg-pjxf-73p4\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"9e65be2a-35a6-3436-b02f-18887cd56d6e","advisory":{"id":"RHSA-2026:74586","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 1, 2026, 5:20:02 PM","dateUpdated":"Oct 2, 2026, 10:21:21 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74586\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74586.json\n","aliases":"CVE-2026-102821\nCVE-2026-102823\nCVE-2026-102824\nCVE-2026-102825\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1d213965-6349-3928-901f-c324c3cdf105","product":{"name":"openshell-0:0.1.2-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"1da60229-742d-300e-8551-abc8358a6d58","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"4b48be98-de6f-3d88-a8c9-e52f16349375","product":{"name":"openshell-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9cba60dd-0f72-34f0-8b1b-c998c136f5c0","product":{"name":"python3-openshell-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a88ee0f1-2f1b-3694-bf40-ee2ce61d5fdc","product":{"name":"openshell-gateway-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b9f50e54-c055-3fd0-8a3b-de5cea3291a8","product":{"name":"openshell-gateway-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4a8ddd2-391b-31e5-bced-3f6dac6a1d08","product":{"name":"python3-openshell-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f6c1b7e8-4cac-377e-9cf4-c0f63ae1a6f4","product":{"name":"openshell-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}}]}