CVE-2026-46595

EUVD-2026-31398
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 41.03%
Affected Products (NVD)
VendorProductVersion
golangcrypto
𝑥
< 0.52.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatCryostat 4 on RHEL 9
4.2.0-19 ≤
𝑥
< *
ADP
Red HatRHEM 1.0 for RHEL 9
0:1.0.3-1.el9em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 10
0:1.1.3-1.el10em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 9
0:1.1.3-1.el9em ≤
𝑥
< *
ADP
Red HatCert Manager support for Red Hat OpenShift release 1.19
1786613805 ≤
𝑥
< *
ADP
Red HatDevWorkspace Operator 0.42
1782401674 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782160196 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782477094 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782160009 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782160210 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782160541 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1782159773 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.3
1785180878 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.6
1784058822 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1782383730 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1782488873 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1782382711 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1784652040 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1784638644 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security 4.9
1781686446 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.10
1781686458 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.11
1783352589 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.0
1783502025 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784196588 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784126780 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782804957 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782758407 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782758410 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782754093 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782744816 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782758409 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux AI 3.4
1782744830 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
1.25.11-2.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
1.26.4-2.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1782471656 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.7.4
1783057868 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.8.1
1784121108 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.8.1
1783612119 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932114 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782931768 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932104 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783536000 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783535989 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783536515 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932521 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783018461 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783018421 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932812 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537001 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932919 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537586 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932969 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933015 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933042 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537392 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933235 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933251 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537955 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933417 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537742 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933602 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783019377 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934054 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934036 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934284 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.29
1782403274 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.15
1784351966 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.4
4-1.4.2 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.4
4-1.4.3 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
golang-go.crypto
bookworm
postponed
bullseye
postponed
forky
1:0.55.0-1
fixed
sid
1:0.55.0-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
golang-go.crypto
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
questing
ignored
resolute
Fixed 1:0.47.0-1ubuntu0.1~esm1
released
xenial
not-affected
snapd
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
lxd
bionic
not-affected
focal
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
not-affected
google-guest-agent
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
Fixed 20250116.00-0ubuntu1~24.04.4
released
questing
Fixed 20250506.01-0ubuntu1.2
released
resolute
Fixed 20250506.01-0ubuntu2.1
released
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
alloy
suse enterprise desktop 15 SP7
1.17.1-150700.15.23.1
fixed
suse enterprise sap 15 SP7
1.17.1-150700.15.23.1
fixed
suse enterprise server 15 SP7
1.17.1-150700.15.23.1
fixed
amazon-ssm-agent
suse enterprise sap 15 SP4
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP5
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP6
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP7
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP4
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP5
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP6
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP7
3.3.4624.0-150000.5.37.1
fixed
apptainer
suse enterprise server 15 SP6
1.5.1-150600.4.24.1
fixed
apptainer-sle15_6
suse enterprise server 15 SP6
1.5.1-150600.4.24.1
fixed
buildah
suse enterprise sap 15 SP7
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP4
1.35.5-150400.3.68.1
fixed
suse enterprise server 15 SP5
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP6
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP7
1.35.5-150500.3.62.1
fixed
cosign
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP4
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP5
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP6
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
cosign-bash-completion
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
cosign-zsh-completion
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
google-guest-agent
suse enterprise sap 15 SP4
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP5
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP6
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP7
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP4
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP5
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP6
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP7
20260529.00-150000.1.70.1
fixed
google-osconfig-agent
suse enterprise sap 15 SP4
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP5
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP6
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP7
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP4
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP5
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP6
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP7
20260615.01-150000.1.55.1
fixed
kubevirt-manifests
suse enterprise sap 15 SP7
1.7.4-150700.3.30.1
fixed
suse enterprise server 15 SP7
1.7.4-150700.3.30.1
fixed
kubevirt-virtctl
suse enterprise sap 15 SP7
1.7.4-150700.3.30.1
fixed
suse enterprise server 15 SP7
1.7.4-150700.3.30.1
fixed
terraform-provider-aws
suse enterprise sap 15 SP4
3.11.0-150200.6.18.1
fixed
suse enterprise sap 15 SP5
3.11.0-150200.6.18.1
fixed
suse enterprise server 15 SP4
3.11.0-150200.6.18.1
fixed
suse enterprise server 15 SP5
3.11.0-150200.6.18.1
fixed
terraform-provider-azurerm
suse enterprise sap 15 SP4
2.32.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
2.32.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
2.32.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
2.32.0-150200.6.12.1
fixed
terraform-provider-external
suse enterprise sap 15 SP4
2.0.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
2.0.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
2.0.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
2.0.0-150200.6.12.1
fixed
terraform-provider-google
suse enterprise sap 15 SP4
3.43.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
3.43.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
3.43.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
3.43.0-150200.6.12.1
fixed
terraform-provider-helm
suse enterprise sap 15 SP4
2.9.0-150200.6.23.1
fixed
suse enterprise sap 15 SP5
2.9.0-150200.6.23.1
fixed
suse enterprise server 15 SP4
2.9.0-150200.6.23.1
fixed
suse enterprise server 15 SP5
2.9.0-150200.6.23.1
fixed
terraform-provider-kubernetes
suse enterprise sap 15 SP4
1.13.2-150200.6.12.1
fixed
suse enterprise sap 15 SP5
1.13.2-150200.6.12.1
fixed
suse enterprise server 15 SP4
1.13.2-150200.6.12.1
fixed
suse enterprise server 15 SP5
1.13.2-150200.6.12.1
fixed
terraform-provider-local
suse enterprise sap 15 SP4
2.0.0-150200.6.17.1
fixed
suse enterprise sap 15 SP5
2.0.0-150200.6.17.1
fixed
suse enterprise server 15 SP4
2.0.0-150200.6.17.1
fixed
suse enterprise server 15 SP5
2.0.0-150200.6.17.1
fixed
terraform-provider-null
suse enterprise sap 15 SP4
3.0.0-150200.6.18.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.6.18.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.6.18.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.6.18.1
fixed
terraform-provider-random
suse enterprise sap 15 SP4
3.0.0-150200.6.15.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.6.15.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.6.15.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.6.15.1
fixed
terraform-provider-tls
suse enterprise sap 15 SP4
3.0.0-150200.5.15.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.5.15.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.5.15.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.5.15.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
amazon-cloudwatch-agent
Amazon Linux 2
0:1.300067.1-1.amzn2
fixed
Amazon Linux 2023
0:1.300067.1-1.amzn2023
fixed
containerd
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-debuginfo
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-debugsource
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-stress
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-stress-debuginfo
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
docker
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
docker-debuginfo
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
docker-debugsource
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
nerdctl
Amazon Linux 2
0:2.2.2-1.amzn2.0.3
fixed
Amazon Linux 2023
0:2.2.2-1.amzn2023.0.3
fixed
nerdctl-debuginfo
Amazon Linux 2
0:2.2.2-1.amzn2.0.3
fixed
rclone
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
rclone-debuginfo
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
rclone-debugsource
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
runfinch-finch
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.2
fixed
Common Weakness Enumeration
References
https://go.dev/cl/781642
https://go.dev/issue/79570
https://groups.google.com/g/golang-announce/c/a082jnz-LvI
https://pkg.go.dev/vuln/GO-2026-5023
https://access.redhat.com/errata/RHSA-2026:23262
https://access.redhat.com/errata/RHSA-2026:23264
https://access.redhat.com/errata/RHSA-2026:26546
https://access.redhat.com/errata/RHSA-2026:26547
https://access.redhat.com/errata/RHSA-2026:30650
https://access.redhat.com/errata/RHSA-2026:30651
https://access.redhat.com/errata/RHSA-2026:33524
https://access.redhat.com/errata/RHSA-2026:33531
https://access.redhat.com/errata/RHSA-2026:36207
https://access.redhat.com/errata/RHSA-2026:36648
https://access.redhat.com/errata/RHSA-2026:36651
https://access.redhat.com/errata/RHSA-2026:36796
https://access.redhat.com/errata/RHSA-2026:36797
https://access.redhat.com/errata/RHSA-2026:36808
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37275
https://access.redhat.com/errata/RHSA-2026:37387
https://access.redhat.com/errata/RHSA-2026:40118
https://access.redhat.com/errata/RHSA-2026:40945
https://access.redhat.com/errata/RHSA-2026:41019
https://access.redhat.com/errata/RHSA-2026:41036
https://access.redhat.com/errata/RHSA-2026:42796
https://access.redhat.com/errata/RHSA-2026:43692
https://access.redhat.com/errata/RHSA-2026:47737
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:51033
https://access.redhat.com/errata/RHSA-2026:54531
https://access.redhat.com/security/cve/CVE-2026-46595
https://bugzilla.redhat.com/show_bug.cgi?id=2480689
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json