CVE Catalog
CVE-2026-73283
LowCVSS 2.5Exploitation Probability (EPSS)
Low risk0.08%
0th percentile - higher than 0% of all known CVEs
Summary
In sshd in OpenSSH before 10.5, the 'restrict' keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
Risk Assessment
Organizations may have restrictions configured for tunnels that are not enforced, potentially leading to unauthorized access.
Recommendation
Upgrade OpenSSH to version 10.5 or later to ensure proper enforcement of restrictions.
Original NVD description (English source)
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.