CVE-2025-47913

High

Published: —Translated: 05/07/2026(UTC)NVD NIST

Summary

SSH clients that receive SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Risk Assessment

An attacker can deliberately send SSH_AGENT_SUCCESS to an SSH client, causing it to crash and terminate the session, leading to a denial of service (DoS) for the user.

Recommendation

Update the SSH client software to the latest version containing a fix for this vulnerability. If a patch is unavailable, consider temporarily limiting interactions with untrusted SSH agents.

Other vulnerabilities in SSH client

CVE-2025-54547Medium
On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g., scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired.

Original NVD description (English source)

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS