Riskcovery

CVE-2026-55655

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

State
Published
Severity
5.0 Medium
Published
Jun 23, 2026
Updated
Oct 30, 2026
Reserved
Jun 16, 2026

Read the record on cve.org

Description

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.

Scores

CVSSScoreVectorSource
3.15.0 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:Nredhat

Weaknesses

  • CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

Affected Products

ProductVersions
Red Hat Enterprise Linux 10Red Hat
  • 0:9.9p1-25.el10_2 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat
  • 0:9.9p1-7.el10_0.5 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:8.0p1-30.el8_10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:8.0p1-30.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:9.9p1-9.el9_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:9.9p1-9.el9_8 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
  • 0:8.7p1-30.el9_2.13 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat
  • 0:8.7p1-38.el9_4.10 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat
  • 0:8.7p1-45.el9_6.5 and laterNot affected
Red Hat Hardened ImagesRed Hat
  • 10.3p1-6.hum1 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818590 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818589 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818505 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818496 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818502 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1793042072 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818602 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818598 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818512 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818587 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818778 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818512 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818782 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818782 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818627 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818790 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818874 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818792 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818662 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818877 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791883722 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881612 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791885618 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881487 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881732 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791883315 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881486 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881769 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791885505 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819252 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818749 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819206 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818979 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819123 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818901 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791820333 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819495 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819104 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1786435483 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1786533529 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787135742 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787241260 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat OpenShift Container Platform 4Red Hat
        Red Hat OpenShift Container Platform 4Red Hat
          Red Hat OpenShift Container Platform 5Red Hat

            References

            Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.