CVE-2026-128087
russh kex_done: shared-secret callback runs before server host-key verification
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until version 0.65.1, the initial key exchange invokes client::Handler::kex_done() with the raw shared secret before check_server_key() accepts the server host key or certificate. A malicious SSH server can therefore trigger application-defined secondary-channel initialization or early data handling even when the server identity is subsequently rejected. Ordinary clients that keep the callback's no-op default or independently defer callback-derived actions until trust is confirmed are not affected. This issue is fixed in version 0.65.1.
| CWE | CWE-696 CWE-863 |
| Vendor | eugeny |
| Product | russh |
| Published | Nov 13, 2026 |
| Last Updated | Nov 13, 2026 |
Get instant alerts for eugeny russh
Be the first to know when new low vulnerabilities affecting eugeny russh are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N