CVE-2025-61985: openbsd openssh
CVSS: 3.6v3.1LowDeferred
AliasesALPINE-CVE-2025-61985UBUNTU-CVE-2025-61985DEBIAN-CVE-2025-61985
Published 06-10-2025Last modified 15-10-2026
Vulnerability summary
CVE-2025-61985 is a low (CVSS 3.6) vulnerability in openbsd openssh. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.8% of scored vulnerabilities.
CVSS score
3.6/10
010
Low · v3.1 (CVE.org)EPSS score
0.12%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 18 · Related 10MGASA-2026-0059OPENSUSE-SU-2025:20122-1RHSA-2025:23479RHSA-2025:23480RHSA-2025:23481RHSA-2026:0693RHSA-2026:0976RHSA-2026:1678RHSA-2026:1790RHSA-2026:1815RHSA-2026:5475SUSE-SU-2025:21044-1SUSE-SU-2025:21128-1SUSE-SU-2025:21161-1SUSE-SU-2025:4067-1SUSE-SU-2025:4098-1SUSE-SU-2025:4112-1SUSE-SU-2026:20662-1USN-8090-1USN-8090-2
Timeline
- 06-10-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
CVSS metrics
5 scores · 5 sources · 1 versionLow 3.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:NSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated3.6LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
- OSV · UbuntuEcosystem advisory · calculated3.6LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
- OSV · DebianEcosystem advisory · calculated3.6LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
- NVDNIST3.6LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.12% on 18-09-2026
18-09-202618-10-2026
EPSS score0.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu2 products
- opensshAll versions (No fix recorded) | < 1:8.2p1-4ubuntu0.13+esm1 | < 1:8.2p1-4ubuntu0.fips.0.13.1 | < 1:8.9p1-3ubuntu0.14 | < 1:8.9p1-3ubuntu0.14+Fips1 | < 1:9.6p1-3ubuntu13.15 | < 1:9.6p1-3ubuntu13.15+Fips1 | < 1:10.0p1-5ubuntu5.1 | < 1:10.2p1-2ubuntu1
- openssh-ssh1All versions (No fix recorded)
Alpine1 product
- openssh< 10.0_p1-r10 | < 10.1_p1-r0
Debian1 product
- openssh< 1:9.2p1-2+deb12u8 | < 1:10.0p1-7+deb13u1 | < 1:10.1p1-1
Openbsd1 product
- openssh< 10.1
4 vendors · 5 products
