VULNERABILITY INTELLIGENCE
CVE-2025-4878
CVSS score3.6 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-07-22
Last modified2026-09-01
Description
A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.