GHSA-736F-C93Q-9FWX russh try_sign: asynchronous confirmation can sign after agent lock

Summary In russh 0.65.0, a sign request for a confirmation-constrained key can retain and use the private key after another connection locks the agent. trysign snapshots an Arc before awaiting Agent::confirm and does not revalidate the shared lock state after the await. An agent-forwarding peer c...

russh try_sign: asynchronous confirmation can sign after agent lock

Summary In russh 0.65.0, a sign request for a confirmation-constrained key can retain and use the private key after another connection locks the agent. trysign snapshots an Arc before awaiting Agent::confirm and does not revalidate the shared lock state after the await. An agent-forwarding peer c...

CVE-2026-128088 russh try_sign: asynchronous confirmation can sign after agent lock

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to version 0.65.1, trysign captures an Arc before awaiting Agent::confirm and does not revalidate the shared lock state or key presence after the await. This is a distinct residual defect in th...

EUVD-2026-125722

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to version 0.65.1, trysign captures an Arc before awaiting Agent::confirm and does not revalidate the shared lock state or key presence after the await. This is a distinct residual defect in th...