https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:15:49.215828+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5538 EUVD-2026-5538 2026-10-18T08:15:49.217951+00:00 EUVD-2026-5538 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34713 fkie_cve-2024-34713 2026-10-18T08:15:49.217982+00:00

sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. Prior to version 1.6.3, any user authorized to connect to a ssh server using `sshproxy` can inject options to the `ssh` command executed by `sshproxy`. All versions of `sshproxy` are impacted. The problem is patched starting in version 1.6.3. The only workaround is to use the `force_command` option in `sshproxy.yaml`, but it's rarely relevant.

 https://cve.radiocsirt.org/vuln/ghsa-jmqp-37m5-49wh GHSA-jmqp-37m5-49wh — sshproxy vulnerable to SSH option injection 2026-10-18T08:15:49.218014+00:00

Affected: Go: github.com/cea-hpc/sshproxy

### Impact Any user authorized to connect to a ssh server using `sshproxy` can inject options to the `ssh` command executed by `sshproxy`. All versions of `sshproxy` are impacted.

### Patches The problem is patched starting on version 1.6.3

### Workarounds The only workaround is to use the `force_command` option in `sshproxy.yaml`, but it's rarely relevant.

### References