CVE-2026-35414
HIGH 8.1EPSS 0.2%
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.
- Affected
- OpenBSD · OpenSSH
- CVSS v3.1 NVD
- 8.1 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 MITRE
- 4.2 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N - EPSS
- 0.24% chance of exploitation in the next 30 days, 14th percentile
- Published
- 2026-04-02
Proof-of-concept exploits (1)
- dehobbs/cve_2026_354142★ · 2026-04-29
Security advisories
- https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2
- https://www.openwall.com/lists/oss-security/2026/04/02/3
- https://www.openssh.org/releasenotes.html#10.3p1