CVE-2024-30170

9.1 criticalEPSS 0.6%

Critical (9.1) in ssh privx. EPSS 0.6% chance of exploitation in the next 30 days.

PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-400
Published: 2024-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ssh:privx

References

https://info.ssh.com/improper-input-validation-faq
https://privx.docs.ssh.com/docs/security

Check your stack JSON