CVE-2025-61985

LowCVSS 3.6

Published: 06/10/2025(UTC)Updated: 14/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in OpenSSH before version 10.1 allows the null character ('\0') in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Risk Assessment

An attacker could exploit this flaw to execute arbitrary code on the SSH server or client, potentially leading to system compromise and data exfiltration.

Recommendation

It is recommended to immediately upgrade OpenSSH to version 10.1 or later, which fixes this vulnerability.

Original NVD description (English source)

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.