CVE-2025-47913

HighCVSS 7.5

Published: 13/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 05/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.67%

51th percentile - higher than 51% of all known CVEs

Summary

SSH clients that receive SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Risk Assessment

An attacker can deliberately send SSH_AGENT_SUCCESS to an SSH client, causing it to crash and terminate the session, leading to a denial of service (DoS) for the user.

Recommendation

Update the SSH client software to the latest version containing a fix for this vulnerability. If a patch is unavailable, consider temporarily limiting interactions with untrusted SSH agents.

Other vulnerabilities in SSH client

CVE-2025-54547Medium
On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g., scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired.

Original NVD description (English source)

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS