CVE-2026-0965

ADVISORY - nist

Summary

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

EPSS Score: 0.00158 (0.054)

Common Weakness Enumeration (CWE)

ADVISORY - nist

External Control of File Name or Path

ADVISORY - redhat

External Control of File Name or Path


Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.

Sign in