Fluid Attacks Database

Description

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10.0	openssh	<0:9.9p1-7.el10_0.3	0:9.9p1-7.el10_0.3
rpm rhel9.6	openssh	<0:8.7p1-45.el9_6.3	0:8.7p1-45.el9_6.3
rpm rhel10	openssh	<0:9.9p1-23.el10_2	0:9.9p1-23.el10_2
rpm rhel6	openssh	-	-
rpm rhel7	openssh	-	-
rpm rhel8	openssh	<0:8.0p1-29.el8_10	0:8.0p1-29.el8_10
rpm rhel9	openssh	<0:8.7p1-49.el9_7 \|\| >=0:9.9p1, <0:9.9p1-7.el9_8	0:9.9p1-7.el9_8
rpm rhel8.4	openssh	<0:8.0p1-7.el8_4.2	0:8.0p1-7.el8_4.2
debian 11	openssh	=1:8.4p1-5 \|\| =1:8.4p1-5+deb11u1 \|\| =1:8.4p1-5+deb11u2 \|\| =1:8.4p1-5+deb11u3 \|\| =1:8.4p1-5+deb11u4 \|\| =1:8.4p1-5+deb11u5 \|\| =1:8.4p1-5+deb11u6 \|\| >=0 <1:8.4p1-5+deb11u7	1:8.4p1-5+deb11u7
debian 12	openssh	=1:9.2p1-2 \|\| =1:9.2p1-2+deb12u1 \|\| =1:9.2p1-2+deb12u2 \|\| =1:9.2p1-2+deb12u3 \|\| =1:9.2p1-2+deb12u4 \|\| =1:9.2p1-2+deb12u5 \|\| =1:9.2p1-2+deb12u6 \|\| =1:9.2p1-2+deb12u7 \|\| =1:9.2p1-2+deb12u8 \|\| =1:9.2p1-2+deb12u9 \|\| >=0 <1:9.2p1-2+deb12u10	1:9.2p1-2+deb12u10

1-10 of 14

Aliases

1. CVE-2026-354142. NVD-2026-354143. OSV-2026-354144. OSV-DEBIAN-2026-354145. SECURITY-TRACKER-CVE-2026-35414

References

1. https://github.com/killercd/CVE-2026-35414

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.