golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

🗓️ 23 Mar 2026 02:37:08Reported by RedHatType

redhat🔗 access.redhat.com👁 68 Views

SSH agent client panics on SSH_AGENT_SUCCESS due to unexpected message type, risking crash.

Reporter	Title	Published	Views	Family All 2089
RedhatCVE	CVE-2025-47913	23 Nov 202521:31	–	redhatcve
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	12 Jan 202617:35	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: VolSync v0.14 security fixes and container updates	13 Jan 202616:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security update	14 Jan 202604:08	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	14 Jan 202604:08	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	19 Jan 202602:20	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	19 Jan 202602:20	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update	22 Jan 202615:47	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update	22 Jan 202615:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	27 Apr 202602:17	–	redhat

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9.4	aarch64	podman	4:4.9.4-20.el9_4.1	podman-4:4.9.4-20.el9_4.1.aarch64.rpm
Red Hat Enterprise Linux	9.4	ppc64le	podman	4:4.9.4-20.el9_4.1	podman-4:4.9.4-20.el9_4.1.ppc64le.rpm
Red Hat Enterprise Linux	9.4	s390x	podman	4:4.9.4-20.el9_4.1	podman-4:4.9.4-20.el9_4.1.s390x.rpm
Red Hat Enterprise Linux	9.4	x86_64	podman	4:4.9.4-20.el9_4.1	podman-4:4.9.4-20.el9_4.1.x86_64.rpm
Red Hat Enterprise Linux	9.4	aarch64	podman-debuginfo	4:4.9.4-20.el9_4.1	podman-debuginfo-4:4.9.4-20.el9_4.1.aarch64.rpm
Red Hat Enterprise Linux	9.4	ppc64le	podman-debuginfo	4:4.9.4-20.el9_4.1	podman-debuginfo-4:4.9.4-20.el9_4.1.ppc64le.rpm
Red Hat Enterprise Linux	9.4	s390x	podman-debuginfo	4:4.9.4-20.el9_4.1	podman-debuginfo-4:4.9.4-20.el9_4.1.s390x.rpm
Red Hat Enterprise Linux	9.4	x86_64	podman-debuginfo	4:4.9.4-20.el9_4.1	podman-debuginfo-4:4.9.4-20.el9_4.1.x86_64.rpm
Red Hat Enterprise Linux	9.4	aarch64	podman-debugsource	4:4.9.4-20.el9_4.1	podman-debugsource-4:4.9.4-20.el9_4.1.aarch64.rpm
Red Hat Enterprise Linux	9.4	ppc64le	podman-debugsource	4:4.9.4-20.el9_4.1	podman-debugsource-4:4.9.4-20.el9_4.1.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-47913
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-hcg3-q754-cr77
go	www.go.dev/cl/700295
go	www.go.dev/issue/75178
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47913
pkg	www.pkg.go.dev/vuln/GO-2025-4116
cve	www.cve.org/CVERecord

08 Sep 2026 20:42Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00623

SSVC

agent panic unexpected message type peer response success unmarshal failure nil pointer dereference malicious actor