CVE-2026-48113Published
Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-48113 · Microsoft / collected KEV context
cve-program · CVE-2026-48113
- https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw
- https://github.com/jpillora/chisel/commit/44310b65667a97901874ffdf4815b3732c22eaa3
nvd · CVE-2026-48113
- https://github.com/jpillora/chisel/commit/44310b65667a97901874ffdf4815b3732c22eaa3
- https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw
osv · GHSA-24fp-5v3p-rvpw
- https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw
- https://github.com/jpillora/chisel
osv · GO-2026-5054
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.