AZL-88329 CVE-2026-39832 affecting package telegraf for versions less than 1.31.0-22

🗓️ 22 May 2026 04:16:22Reported by GoogleType

osv🔗 osv.dev👁 9 Views

SSH key constraint extensions stripped when forwarding to remote agent in Telegraf below 1.31.0-22.

Reporter	Title	Published	Views	Family All 6060
RedhatCVE	CVE-2026-39832	5 Jun 202619:44	–	redhatcve
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	8 Jul 202615:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release	8 Jul 202615:46	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security, bug fix, and enhancement update	9 Jul 202605:35	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	9 Jul 202605:35	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security, bug fix, and enhancement update	9 Jul 202607:38	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	9 Jul 202607:38	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release	9 Jul 202611:43	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release	9 Jul 202612:02	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update	9 Jul 202614:48	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39832

18 Sep 2026 05:37Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.1

EPSS0.006

SSVC

telegraf SSH key forwarding constraint extensions remote agent silent stripping