CVE-2026-111061

A flaw was found in russh. When processing key addition requests containing lifetime constraints, the Secure Shell SSH agent server spawns a separate long-lived task for repeated constraint records and fails to roll back tasks if subsequent parsing fails. An attacker capable of communicating with...

DEBIAN-CVE-2026-111061

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

russh: Unbounded memory allocation in agent protocol server via crafted constraint records

Summary russhkeys::agent::server::addkey russh/src/keys/agent/server.rs:271-319 spawns a dedicated tokio task for every 5-byte SSHAGENTCONSTRAINLIFETIME record attached to an added key, each cloning the key blob and sleeping for the declared lifetime up to 136 years. The loop has no per-request...

GHSA-4WC5-F2RC-Q74M russh: Unbounded memory allocation in agent protocol server via crafted constraint records

Summary russhkeys::agent::server::addkey russh/src/keys/agent/server.rs:271-319 spawns a dedicated tokio task for every 5-byte SSHAGENTCONSTRAINLIFETIME record attached to an added key, each cloning the key blob and sleeping for the declared lifetime up to 136 years. The loop has no per-request...

GHSA-J7H2-66J4-GHJF A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...

A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

EUVD-2026-104457

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061 russh agent server converts constraint records into unbounded never-rolled-back tasks

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

CVE-2026-111061

The russh Rust SSH client and server library contains a vulnerability in its SSH agent protocol implementation prior to version 0.64.1 . The agent server improperly handles SSH_AGENT_CONSTRAIN_LIFETIME records by spawning a separate long-lived task for every record in a constrained add-key reques...

CVE-2026-111061: Allocation of Resources Without Limits or Throttling

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSHAGENTCONSTRAINLIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the...

PT-2026-117497

Name of the Vulnerable Software and Affected Versions russh versions prior to 0.64.1 Description The agent server in the library contains a flaw where it spawns a separate long-lived task for every SSH AGENT CONSTRAIN LIFETIME record received in a constrained add-key request. The add key function...

CVE-2026-102825

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...

russh: russh: Cryptographic fallback bypass via missing public key validation

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

russh: russh: Denial of Service via unbounded memory exhaustion during stalled key renegotiation

A flaw was found in russh. An authenticated remote attacker can cause a Denial of Service DoS by initiating a Secure Shell SSH key renegotiation without completing it and flooding the server with channel open requests. Because the server continues buffering incoming requests without draining the...

russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...

russh: russh: State corruption via unverified SSH channel identifiers

A flaw was found in russh, a Secure Shell SSH client and server library. When communicating with a client, a malicious SSH server can send channel lifecycle events referencing unverified, unopened, or closed channel identifiers. Because the library forwards these events to client handlers without...