CVE-2026-62949

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, _process_channel_open and _process_channel_open_confirmation in asyncssh/connection.py accept a peer-supplied send_pktsize value of zero. When channel data reaches SSHChannel._flush_send_buf in asyncssh/channel.py, the zero value causes each loop iteration to slice and remove zero bytes without reducing the send window, leaving the synchronous loop permanently true with no await point. A malicious SSH server can trigger the client path through SSH_MSG_CHANNEL_OPEN_CONFIRMATION before the first channel write, while an authenticated client can trigger the server path through SSH_MSG_CHANNEL_OPEN and freeze every current and future connection handled by the process. This vulnerability is fixed in 2.24.0.

• CWE-835

• https://github.com/ronf/asyncssh/commit/756cbae5350789ce9735f15f704bae9b5a3608b8
• https://github.com/ronf/asyncssh/commit/9c354270c009285525e126721e8ed5fbed1f8a67
• https://github.com/ronf/asyncssh/releases/tag/v2.24.0
• https://github.com/ronf/asyncssh/security/advisories/GHSA-rw4j-r22c-9gc3

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62941Incus is a system container and virtual machine manager. Pri…9.9
• CVE-2026-62943btrbk is a tool for creating snapshots and remote backups of…8.7
• CVE-2026-62945TREK is a collaborative travel planner. Prior to 3.1.3, TREK…4.3
• CVE-2026-62946ImageMagick is free and open-source software used for editin…4.7
• CVE-2026-62947OpenWrt is a Linux operating system targeting embedded devic…4.9
• CVE-2026-62948OpenWrt is a Linux operating system targeting embedded devic…9.6
• CVE-2026-6295The WP Optimizer plugin for WordPress is vulnerable to SQL I…4.9
• CVE-2026-62959Coturn is a free open source implementation of TURN and STUN…8.2
• CVE-2026-6296Heap buffer overflow in ANGLE in Google Chrome prior to 147.…9.6
• CVE-2026-62960Git for Windows is the Windows port of Git. Prior to 2.55.0.…7.4
• CVE-2026-62963Centrifugo is an open-source scalable real-time messaging se…8.7
• CVE-2026-6297Use after free in Proxy in Google Chrome prior to 147.0.7727…8.3