CVE-2026-73281

ADVISORY - nist

Summary

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-669⁠

Incorrect Resource Transfer Between Spheres

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.