CVE Catalog
CVE-2025-32728
MediumSummary
In sshd in OpenSSH before version 10.0, the DisableForwarding directive does not adhere to documentation, failing to disable X11 and agent forwarding.
Risk Assessment
This could allow unauthorized forwarding of X11 sessions or SSH agent, increasing the risk of privilege escalation or data leakage.
Recommendation
It is recommended to upgrade OpenSSH to version 10.0 or later, which correctly implements the DisableForwarding directive.
Original NVD description (English source)
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.