CVE-2025-61985

Low

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

mitre·CWE-158·Published 2025-10-06

CVSS

3.6

EPSS

0.00

KEV

Exploits

cve.orgen

137 chars

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

NVDen

137 chars

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	3.6	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
3.1	Primary	cve.org	3.6	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
3.1	Secondary	NVD	3.6	1.0	2.5	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N