VULNERABILITY INTELLIGENCE

CVE-2025-32728

CVSS score4.3 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-04-10

Last modified2026-10-15

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Description

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Weakness classification

cve@mitre.org: CWE-440
nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@mitre.org — Product
cve@mitre.org — Patch
cve@mitre.org — Mailing List, Product, Release Notes
cve@mitre.org — Release Notes
cve@mitre.org — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
0b142b55-0307-4c5a-b3c9-f314f3fb7c5e