Back to search
CVE-2026-39828
Published: May 22, 2026
Modified: May 22, 2026
PUBLISHED
Description
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
| Vendor | Product | Versions |
|---|---|---|
golang.org/x/crypto | golang.org/x/crypto/ssh | affected 0 - < 0.52.0 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now