Bug 2567690 (CVE-2026-123158) - CVE-2026-123158 openssh: OpenSSH: Password authentication bypass via password hash misinterpretation
Summary: CVE-2026-123158 openssh: OpenSSH: Password authentication bypass via password...
Keywords:
Status: NEW
Alias: CVE-2026-123158
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-05 22:18 UTC by OSIDB Bzimport
Modified: 2026-11-06 05:07 UTC (History)
19 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-05 22:18:16 UTC 
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.
Note You need to log in before you can comment on or make changes to this bug.