Security Advisory
CVE-2026-59851
8.8
HIGH
Vulnerability Description
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.
Published Date
July 21, 2026
Official Source
NIST NVD Advisory