CVE-2026-46595

ADVISORY - github

Summary

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

EPSS Score⁠: 0.00503 (0.404)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-303⁠

Incorrect Implementation of Authentication Algorithm

CWE-863⁠

Incorrect Authorization

ADVISORY - github

CWE-303⁠

Incorrect Implementation of Authentication Algorithm

CWE-863⁠

Incorrect Authorization

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.