CVE-2026-73281: 
Alma Linux vulnerability analysis and mitigation

CVE-2026-73281 is a privilege escalation vulnerability in the ssh-agent component of OpenSSH affecting all versions before 10.5. Due to a misinteraction between agent locking and the session-bind@openssh.com extension, certain operations intended to be restricted to local execution — such as adding tokens or using cryptographic keys — can be triggered remotely. The vulnerability was published on August 11, 2026, and carries a CVSS v3.1 base score of 3.5 (Low) (GitHub Advisory, Red Hat Bugzilla).

The root cause is classified under CWE-669 (Incorrect Resource Transfer Between Spheres) and CWE-266 (Incorrect Privilege Assignment). The session-bind@openssh.com extension, when combined with the agent locking mechanism, fails to properly enforce the locality constraint on certain ssh-agent operations. This allows a low-privileged remote attacker to invoke operations — such as adding PKCS#11 tokens or using stored SSH keys — that should only be accessible to the local user running the agent. No public proof-of-concept or detailed technical write-up has been identified at this time (GitHub Advisory, Red Hat Bugzilla).

A low-privileged network attacker can remotely perform ssh-agent operations that were designed to be local-only, including adding authentication tokens and using SSH private keys stored in the agent. This could allow an attacker to authenticate to remote systems using the victim's SSH keys without direct access to the key material, potentially enabling unauthorized lateral movement across SSH-accessible infrastructure. Confidentiality and availability impacts are rated as none; the primary risk is to integrity through unauthorized key usage (GitHub Advisory).

There is no known public proof-of-concept exploit and no evidence of in-the-wild exploitation as of the time of publication. The EPSS score is approximately 0.158% (5th percentile), indicating a low near-term exploitation probability. The NVD SSVC assessment confirms exploitation status as "none" and the attack is not automatable, requiring low privileges and high attack complexity (GitHub Advisory).

The primary remediation is to upgrade OpenSSH to version 10.5 or later, which corrects the misinteraction between agent locking and the session-bind@openssh.com extension. As interim mitigations, administrators should restrict network access to ssh-agent sockets where possible and review ssh-agent configurations to ensure agent locking is properly enforced. Disabling SSH agent forwarding (ForwardAgent no) in client configurations can also reduce exposure (GitHub Advisory, OpenSSH Release Notes).

Red Hat has opened a tracking bug (Bug 2514327) and classified the issue as low severity for their products. Detection plugins have been published by Tenable (Nessus plugin 335161, Qualys detection 6663277), indicating broad scanner coverage shortly after disclosure (Red Hat Bugzilla).