CVE-2026-39828
Vulnerability Summary
Timeline
Description
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
CVSS Metrics
- v3.1•MEDIUM•Score: 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Trends
Current EPSS score: 0.37%• Percentile: 31%
Techniques & Countermeasures
- CWE-295•Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
- CWE-281•Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Affected Systems
- chainguard•aactl
< 0.4.12-r53
- chainguard•act
< 0
- chainguard•actions-runner-controller
< 0
- chainguard•actions-runner-controller-fips
< 0
- chainguard•age
< 0
- chainguard•age-fips
< 1.3.1-r11 | < 0
- chainguard•agentbeat
< 0
- chainguard•agentbeat-fips
< 0
- chainguard•amass
< 0
- chainguard•amazon-cloudwatch-agent
< 0
- chainguard•amazon-cloudwatch-agent-fips
< 0
- chainguard•amazon-cloudwatch-agent-operator
< 0
- chainguard•amazon-cloudwatch-agent-operator-fips
< 0
- chainguard•amazon-ssm-agent
< 0 | < 3.3.4515.0-r2
- chainguard•amazon-ssm-agent-ecs-exec
< 0
- chainguard•amazon-ssm-agent-ecs-exec-fips
< 0
- chainguard•amazon-ssm-agent-fips
< 3.3.4515.0-r3 | < 0
- chainguard•apache-exporter
< 0
- chainguard•apko
< 0
- chainguard•apko-fips
< 0
- chainguard•apm-server-8.19
< 0
- chainguard•apm-server-9.1
all
- chainguard•apm-server-9.3
< 0
- chainguard•apm-server-9.4
< 0
- chainguard•apply-cve-bump
< 0
- chainguard•argo-cd-3.0
all
- chainguard•argo-cd-3.0-compat
all
- chainguard•argo-cd-3.1
< 3.1.16-r3
- chainguard•argo-cd-3.1-compat
< 3.1.16-r3
- chainguard•argo-cd-3.3-compat
< 0
- chainguard•argo-cd-3.4
< 0
- chainguard•argo-cd-3.4-compat
< 0
- chainguard•argo-cd-fips-3.0
all
- chainguard•argo-cd-fips-3.0-compat
all
- chainguard•argo-cd-fips-3.1
< 3.1.16-r1
- chainguard•argo-cd-fips-3.1-compat
< 3.1.16-r1
- chainguard•argo-cd-fips-3.2
< 3.2.12-r5
- chainguard•argo-cd-fips-3.2-compat
< 3.2.12-r5
- chainguard•argo-cd-fips-3.3-compat
< 3.3.10-r5
- chainguard•argo-cd-fips-3.4
< 3.4.2-r4
- chainguard•argo-cd-fips-3.4-compat
< 3.4.2-r4
- chainguard•argo-events
< 0
- chainguard•argo-events-fips
< 0
- chainguard•argo-rollouts
< 0
- chainguard•argo-workflow-controller-3.6
< 3.6.19-r7
- chainguard•argo-workflow-controller-fips-3.6
< 3.6.19-r9
- chainguard•argo-workflow-executor-3.6
< 3.6.19-r7
- chainguard•argo-workflow-executor-fips-3.6
< 3.6.19-r9
- chainguard•argo-workflows-3.6
< 3.6.19-r7
- chainguard•argo-workflows-fips-3.6
< 3.6.19-r9
Showing first 50 affected entries in server-rendered view.
References (64)
- https://go.dev/issue/79562
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://go.dev/cl/781621
- https://pkg.go.dev/vuln/GO-2026-5014
- https://nvd.nist.gov/vuln/detail/CVE-2026-39828
- https://cs.opensource.google/go/x/crypto
- https://access.redhat.com/security/cve/CVE-2026-39828
- https://bugzilla.redhat.com/show_bug.cgi?id=2480687
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json
- https://access.redhat.com/errata/RHSA-2026:26547
- https://access.redhat.com/errata/RHSA-2026:36625
- https://access.redhat.com/errata/RHSA-2026:36207
- https://access.redhat.com/errata/RHSA-2026:26546
- https://access.redhat.com/errata/RHSA-2026:36319
- https://access.redhat.com/errata/RHSA-2026:36648
- https://access.redhat.com/errata/RHSA-2026:36105
- https://access.redhat.com/errata/RHSA-2026:36167
- https://access.redhat.com/errata/RHSA-2026:36796
- https://access.redhat.com/errata/RHSA-2026:36808
- https://access.redhat.com/errata/RHSA-2026:36651
- https://access.redhat.com/errata/RHSA-2026:36797
- https://access.redhat.com/errata/RHSA-2026:37271
- https://access.redhat.com/errata/RHSA-2026:37268
- https://access.redhat.com/errata/RHSA-2026:37387
- https://access.redhat.com/errata/RHSA-2026:37272
- https://access.redhat.com/errata/RHSA-2026:37278
- https://access.redhat.com/errata/RHSA-2026:37286
- https://access.redhat.com/errata/RHSA-2026:37296
- https://access.redhat.com/errata/RHSA-2026:41019
- https://access.redhat.com/errata/RHSA-2026:40945
- https://access.redhat.com/errata/RHSA-2026:40118
- https://access.redhat.com/errata/RHSA-2026:41036
- https://access.redhat.com/errata/RHSA-2026:41031
- https://access.redhat.com/errata/RHSA-2026:41066
- https://access.redhat.com/errata/RHSA-2026:40262
- https://access.redhat.com/errata/RHSA-2026:40972
- https://access.redhat.com/errata/RHSA-2026:40974
- https://access.redhat.com/errata/RHSA-2026:40969
- https://access.redhat.com/errata/RHSA-2026:40119
- https://access.redhat.com/errata/RHSA-2026:41055
- https://access.redhat.com/errata/RHSA-2026:42146
- https://access.redhat.com/errata/RHSA-2026:42796
- https://access.redhat.com/errata/RHSA-2026:48151
- https://access.redhat.com/errata/RHSA-2026:51033
- https://access.redhat.com/errata/RHSA-2026:43692
- https://access.redhat.com/errata/RHSA-2026:46903
- https://access.redhat.com/errata/RHSA-2026:51038
- https://access.redhat.com/errata/RHSA-2026:52857
- https://access.redhat.com/errata/RHSA-2026:52910
- https://access.redhat.com/errata/RHSA-2026:43052
- https://access.redhat.com/errata/RHSA-2026:46885
- https://access.redhat.com/errata/RHSA-2026:47735
- https://security-tracker.debian.org/tracker/CVE-2026-39828
- https://access.redhat.com/errata/RHSA-2026:54531
- https://access.redhat.com/errata/RHSA-2026:57191
- https://access.redhat.com/errata/RHSA-2026:57194
- https://ubuntu.com/security/CVE-2026-39828
- https://www.cve.org/CVERecord?id=CVE-2026-39828
- https://access.redhat.com/errata/RHSA-2026:59467
- https://access.redhat.com/errata/RHSA-2026:60520
- https://pkg.go.dev
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39828.json
- https://access.redhat.com/errata/RHSA-2026:66521
- https://access.redhat.com/errata/RHSA-2026:66022