OpenSSH ssh-agent privilege escalation (CVE-2023-51384)

Vulnerability ID	Vulnerability Overview
CVE-2023-51384	When adding PKCS#11-hosted private keys to ssh-agent, destination constraints are only applied to the first key returned by a token. This flaw allows local attackers to bypass restrictions and access subsequent unprotected keys.

Affected Supported TeraStations

None
 

Back to Security Notices

Date	Description
09/02/2026	Initial release

Back to Security Notices