NexaPulse
Subscribe
7.5highHigh

CVE-2026-35385

Openbsd Openssh

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
  • To exploit it, no account is needed.
  • Beyond that, someone has to be persuaded to take an action first.

Scoring

CVSS
7.5 (v3.1)
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-281
Assigned by
cve@mitre.org

Dates

Published
2026-04-02
Last modified
2026-09-01
Sources
NVD

Affected products

  • Openbsd Openssh- 10.3

As listed in the NVD configuration data. Not a statement about your estate.

References