CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py, asyncssh/auth_keys.py, and asyncssh/misc.py with the raw SSH username during pre-authentication server config reload, allowing a server configured with AuthorizedKeysFile authorized_keys/%u to read an authorized-keys file outside the intended directory when the SSH username contains /, \, or .. path traversal segments and authenticate with an attacker-selected key file. This issue is fixed in version 2.23.0.

• CWE-22

• https://github.com/ronf/asyncssh/commit/2af2382cce946c959a378a62f257af253dc4ab51Patch
• https://github.com/ronf/asyncssh/commit/3d515ba9ba0cd9990d248bdf62bcf05d51261a88Patch
• https://github.com/ronf/asyncssh/security/advisories/GHSA-g794-3fmp-753hExploit, Vendor Advisory
• https://github.com/ronf/asyncssh/security/advisories/GHSA-g794-3fmp-753hExploit, Vendor Advisory

Published

Jul 17, 2026

Last Modified

Jul 30, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45302parse-nested-form-data is a tiny node module for parsing For…8.2
• CVE-2026-45303Open WebUI is a self-hosted artificial intelligence platform…7.7
• CVE-2026-45304Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-45305Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-45306pyLoad is a free and open-source download manager written in…6.5
• CVE-2026-45307Speakr is a personal, self-hosted web application designed f…6.1
• CVE-2026-4531A weakness has been identified in Free5GC 4.1.0. Affected is…6.9
• CVE-2026-45310CodeWhale is a DeepSeek + MiMo coding agent in terminal. Pri…7.4
• CVE-2026-45311CodeWhale is a DeepSeek + MiMo coding agent in terminal. Fro…9.6
• CVE-2026-45312RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…9.9
• CVE-2026-45313Sandboxie-Plus is an open source sandbox-based isolation sof…7.7
• CVE-2026-45314Open WebUI is a self-hosted artificial intelligence platform…6.1