CVE-2026-48107
Last modified
CVE-2026-48107 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTH_INFO_REQUEST with an attacker-controlled prompt count, and the client would use that raw count directly in Vec::with_capacity(...) before validating that enough prompt data was actually present in the packet. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTH_INFO_REQUEST with an attacker-controlled prompt count, and the client would use that raw count directly in Vec::with_capacity(...) before validating that enough prompt data was actually present in the packet. This issue has been patched in version 0.61.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-48107?
How severe is CVE-2026-48107?
How do I fix CVE-2026-48107?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-48098NexTor IP Changer is a command-line tool that leverages the …7.3
- CVE-2026-4810A Code Injection and Missing Authentication vulnerability in…9.3
- CVE-2026-481017-Zip is a file archiver with a high compression ratio. Vers…6.5
- CVE-2026-481027-Zip is a file archiver with a high compression ratio. Vers…4.3
- CVE-2026-481037-Zip is a file archiver with a high compression ratio. Vers…7.1
- CVE-2026-481047-Zip is a file archiver with a high compression ratio. Vers…4.2
- CVE-2026-48108Russh is a Rust SSH client & server library. From version 0.…5.3
- CVE-2026-48109MessagePack for C# is a MessagePack serializer for C#. Prior…8.2
- CVE-2026-4811The WPB Floating Menu & Categories for WordPress – Sticky Si…4.9
- CVE-2026-48110Russh is a Rust SSH client & server library. From version 0.…7.5
- CVE-2026-481117-Zip is a file archiver with a high compression ratio. Vers…7.1
- CVE-2026-481127-Zip is a file archiver with a high compression ratio. Vers…6.5
Are you affected by CVE-2026-48107?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST