7.8

CVE-2025-14821: libssh Uncontrolled Search Path Element

CVSS: 7.8v3.1HighAnalyzed
AliasesCGA-38r6-5rvw-4273CGA-62m5-xqcw-876wCGA-ghm8-94wh-w4wr
Published 07-04-2026Last modified 31-08-2026
Open JSON

Vulnerability summary

CVE-2025-14821 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in libssh. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
RHSA-2026:7067CGA-HC43-945H-JR7V

Timeline

  1. 07-04-2026
    PublishedVulnerability first disclosed.
  2. 31-08-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard3 products
  • libssh< 0.12.0-r2
  • libssh-dev< 0.12.0-r2
  • libssh2< 1.11.1-r4
Wolfi3 products
  • libssh< 0.12.0-r2
  • libssh-dev< 0.12.0-r2
  • libssh2< 1.11.1-r4
Libssh1 product
Redhat1 product

4 vendors · 8 products

References

8 links