{"id":"EUVD-2026-89365","enisaUuid":"24e6a8ba-18aa-332d-a8a4-e878a48368c1","description":"Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in russh/src/server/encrypted.rs increments self.common.auth_attempts but never compares it with server::Config.max_auth_attempts. An unauthenticated remote client can continue submitting authentication requests on one connection beyond the configured cap, bypassing the deployment\u0027s attempt-limiting policy and increasing online guessing opportunity and backend authentication workload. This issue is fixed in version 0.62.6.","datePublished":"Sep 29, 2026, 6:31:32 PM","dateUpdated":"Sep 30, 2026, 7:29:26 PM","baseScore":3.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/Eugeny/russh/security/advisories/GHSA-g6xm-f9xp-qq35\nhttps://github.com/Eugeny/russh/commit/f8fd0b11a393364dc7f01a182482d86adafdd653\nhttps://github.com/Eugeny/russh/releases/tag/v0.62.6\n","aliases":"CVE-2026-102825\nGHSA-g6xm-f9xp-qq35\n","assigner":"GitHub_M","epss":0.35,"enisaIdProduct":[{"id":"e673adf0-b864-3357-8829-a66e82aada60","product":{"name":"russh","vendor":{"name":"Eugeny"}},"product_version":"\u003c 0.62.6"}],"enisaIdVendor":[{"id":"1d385be4-1b40-3145-a582-9ed13fddc171","vendor":{"name":"Eugeny"}}],"enisaIdVulnerability":[{"id":"6e6f1e0e-996b-36bd-8041-ea6c986d3d39","vulnerability":{"id":"CVE-2026-102825","description":"Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in russh/src/server/encrypted.rs increments self.common.auth_attempts but never compares it with server::Config.max_auth_attempts. An unauthenticated remote client can continue submitting authentication requests on one connection beyond the configured cap, bypassing the deployment\u0027s attempt-limiting policy and increasing online guessing opportunity and backend authentication workload. This issue is fixed in version 0.62.6.","datePublished":"Sep 29, 2026, 6:31:32 PM","dateUpdated":"Sep 30, 2026, 7:29:26 PM","status":"PUBLISHED","baseScore":3.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/Eugeny/russh/security/advisories/GHSA-g6xm-f9xp-qq35\nhttps://github.com/Eugeny/russh/commit/f8fd0b11a393364dc7f01a182482d86adafdd653\nhttps://github.com/Eugeny/russh/releases/tag/v0.62.6\n","enisa_id":"EUVD-2026-89365\n","assigner":"GitHub_M","epss":0.35,"dataProcessed":"Nov 11, 2026, 7:20:40 AM","vulnerabilityProduct":[{"id":"602bfa0b-8c7d-3449-8c3f-8a3632015c5d","product":{"name":"russh","vendor":{"name":"Eugeny"}},"product_version":"\u003c 0.62.6"}],"vulnerabilityVendor":[{"id":"431d3478-f5a0-3df8-bc6f-88354c6dd35f","vendor":{"name":"Eugeny"}}]}},{"id":"d4d778dc-693b-35a3-a3dd-903acb8505ab","vulnerability":{"id":"GHSA-g6xm-f9xp-qq35","description":"Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path","datePublished":"Sep 30, 2026, 11:26:17 PM","dateUpdated":"Sep 30, 2026, 11:26:17 PM","baseScore":0.0,"references":"https://github.com/Eugeny/russh/security/advisories/GHSA-g6xm-f9xp-qq35\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-102825\nhttps://github.com/Eugeny/russh/commit/f8fd0b11a393364dc7f01a182482d86adafdd653\nhttps://github.com/Eugeny/russh\nhttps://github.com/Eugeny/russh/releases/tag/v0.62.6\n","enisa_id":"EUVD-2026-89365\n","aliases":"CVE-2026-102825\nGHSA-g6xm-f9xp-qq35\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"68baa245-5784-313a-a632-777572d7d5c9","advisory":{"id":"RHSA-2026:74586","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 1, 2026, 5:20:02 PM","dateUpdated":"Oct 2, 2026, 10:21:21 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74586\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74586.json\n","aliases":"CVE-2026-102821\nCVE-2026-102823\nCVE-2026-102824\nCVE-2026-102825\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1d213965-6349-3928-901f-c324c3cdf105","product":{"name":"openshell-0:0.1.2-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"1da60229-742d-300e-8551-abc8358a6d58","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"4b48be98-de6f-3d88-a8c9-e52f16349375","product":{"name":"openshell-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9cba60dd-0f72-34f0-8b1b-c998c136f5c0","product":{"name":"python3-openshell-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a88ee0f1-2f1b-3694-bf40-ee2ce61d5fdc","product":{"name":"openshell-gateway-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b9f50e54-c055-3fd0-8a3b-de5cea3291a8","product":{"name":"openshell-gateway-0:0.1.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4a8ddd2-391b-31e5-bced-3f6dac6a1d08","product":{"name":"python3-openshell-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f6c1b7e8-4cac-377e-9cf4-c0f63ae1a6f4","product":{"name":"openshell-0:0.1.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}}]}