What is CVE-2026-73281?

CVE-2026-73281 is a low-severity vulnerability in Openbsd Openssh, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 3.5/10. Published 2026-08-11.

How severe is CVE-2026-73281?

Low severity. CVSS v3 base score is 3.5 out of 10.

Vulnerability in Openbsd Openssh

CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@…

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N.

Affected products

Openbsd Openssh — versions 0

Weakness classification (CWE)

CWE-669 — Incorrect Resource Transfer Between Spheres

References

cve@mitre.org

Frequently asked questions

What is CVE-2026-73281?: CVE-2026-73281 is a low-severity vulnerability in Openbsd Openssh, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 3.5/10. Published 2026-08-11.
How severe is CVE-2026-73281?: Low severity. CVSS v3 base score is 3.5 out of 10.