CVE-2026-39832
Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th
When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.
| Vendor | golang.org/x/crypto |
| Product | golang.org/x/crypto/ssh/agent |
| Published | May 22, 2026 |
| Last Updated | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for golang.org/x/crypto golang.org/x/crypto/ssh/agent
Be the first to know when new critical vulnerabilities affecting golang.org/x/crypto golang.org/x/crypto/ssh/agent are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
golang.org/x/crypto / golang.org/x/crypto/ssh/agent
0 < 0.52.0
References
go.dev: https://go.dev/issue/79435 go.dev: https://go.dev/cl/778642 groups.google.com: https://groups.google.com/g/golang-announce/c/a082jnz-LvI pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-5006 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-39832 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2480685 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36199 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37072 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35833 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37410 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37123 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43692 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36625 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36648 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41036 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37387 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42146 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43052 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41066 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41031 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40262 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40972 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36797 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37271
Credits
NCC Group Cryptography Services, sponsored by Teleport