OpenSSH ProxyCommand command injection (CVE-2023-51385)

Sep 02, 2026

Vulnerability ID	Vulnerability Overview
CVE-2023-51385	OpenSSH fails to sanitize shell metacharacters in hostnames before passing them to `ProxyCommand`. An attacker can exploit this by tricking a user into connecting to a crafted hostname, executing arbitrary commands on the client system.

Affected Supported TeraStations

None

Date	Description
09/02/2026	Initial release