CVE-2026-102824: eugeny russh
Vulnerability summary
CVE-2026-102824 is a medium (CVSS 4.3) vulnerability in eugeny russh. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 29-09-2026PublishedVulnerability first disclosed.
- 30-09-2026Last modifiedVulnerability information updated.
Description
Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in both server_dh and compute_shared_secret, forcing the X25519 contribution to the combined shared secret to zero. A malicious SSH peer can therefore make the combined secret depend only on ML-KEM, defeating the hybrid exchange's intended fallback protection if ML-KEM is later weakened. This issue is fixed in version 0.63.0.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · Crates.ioEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- NVDNIST4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- OSV · DebianEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Crates.Io1 product
- russh< 0.63.0
Debian1 product
- rust-russh< 0.64.1-1
Eugeny1 product
- russh< 0.63.0
Ubuntu1 product
- rust-russhAll versions (No fix recorded)
4 vendors · 4 products
References
8 links
- github.com/Eugeny/russhPACKAGE
