CVE-2025-14821

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

State: Published
Severity: 7.8 High
Published: Apr 7, 2026
Updated: Aug 31, 2026
Reserved: Dec 17, 2025

Description

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	redhat

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
Red Hat Hardened ImagesRed Hat	0.12.0-1.1.hum1 and laterNot affected
Red Hat Enterprise Linux 10Red Hat
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat Enterprise Linux 9Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat

References

RHSA-2026:7067vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-14821vdb-entry
RHBZ#2423148issue-tracking
https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.