CVE-2026-116696

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh::keys::agent::server::serve in russh/src/keys/agent/server.rs accepts repeated SSH_AGENT_CONSTRAIN_CONFIRM records while adding a key and appends every Constraint::Confirm record to the key's retained constraint vector without a count or memory limit. A process that can connect to the agent socket, including the remote side of a forwarded agent session, can repeatedly add constrained keys and cause renewable memory growth that persists for the process lifetime because keys without a lifetime constraint do not expire. This issue is fixed in version 0.65.0.

• CWE-770

• https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6
• https://github.com/Eugeny/russh/releases/tag/v0.65.0
• https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9

Published

Oct 27, 2026

Last Modified

Oct 27, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116690MLflow is an open source AI engineering platform for agents,…7.5
• CVE-2026-116691MLflow is an open source AI engineering platform for agents,…6.5
• CVE-2026-116692MLflow is an open source AI engineering platform for agents,…9.8
• CVE-2026-116693dd-trace is the Datadog APM client for Node.js. From 2.0.0 u…8.7
• CVE-2026-116694OpenTelemetry Python provides the Python API and SDK for Ope…6.3
• CVE-2026-116695Crass is a Ruby CSS parser that is compliant with the CSS Sy…5.3
• CVE-2026-11670Use after free in PDF in Google Chrome prior to 149.0.7827.1…8.8
• CVE-2026-11671Use after free in Navigation in Google Chrome prior to 149.0…9.6
• CVE-2026-11672Heap buffer overflow in GPU in Google Chrome on Android prio…8.3
• CVE-2026-116723FLTK through 1.4.5 contains a stack-based buffer overflow vu…7.8
• CVE-2026-116724FLTK through 1.4.5 contains an integer overflow vulnerabilit…7.8
• CVE-2026-116725gbsplay through 0.0.103 contains an out-of-bounds read vulne…5.5