russh kex_done: Shared-secret callback runs before server host-key verification

Summary A malicious SSH server whose host key is rejected can still cause russh's client::Handler::kexdone callback to execute with the raw key-exchange shared secret. Applications using the callback for its documented protocol-bridging purpose may derive keys, initialize a secondary data channel...

GHSA-9264-JVGF-6W2F russh kex_done: Shared-secret callback runs before server host-key verification

Summary A malicious SSH server whose host key is rejected can still cause russh's client::Handler::kexdone callback to execute with the raw key-exchange shared secret. Applications using the callback for its documented protocol-bridging purpose may derive keys, initialize a secondary data channel...

EUVD-2026-125719

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until version 0.65.1, the initial key exchange invokes client::Handler::kexdone with the raw shared secret before checkserverkey accepts the server host key or certificate. A...

CVE-2026-128087 russh kex_done: shared-secret callback runs before server host-key verification

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until version 0.65.1, the initial key exchange invokes client::Handler::kexdone with the raw shared secret before checkserverkey accepts the server host key or certificate. A...

CVE-2026-128087

The russh Rust SSH library (versions 0.55.0 through 0.65.0 ) contains a flaw where the client::Handler::kex_done() callback is invoked with the raw shared secret before the server's host key or certificate is verified by check_server_key(). This allows a malicious SSH server to trigger applicatio...