VULNERABILITY INTELLIGENCE

CVE-2025-61985

CVSS score3.6 LOW

EPSS probability0.13%

CISA KEVNot currently listed

Published2025-10-06

Last modified2026-10-15

Description

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.