CVE-2025-32728

Description

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

References

https://www.openssh.com/txt/release-7.4

https://www.openssh.com/txt/release-10.0

https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html

https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367

https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3