CVE-2026-102822

The russh Rust SSH client and server library is vulnerable to a slice-index-out-of-range panic in versions prior to 0.63.1 . The root cause is a flaw in the selection logic where a connection configured to permit mac=none can incorrectly negotiate a MAC-requiring CTR or CBC block cipher. An attac...