CVE-2025-32728

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

CVSS 3.1

3.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-25)

CWE

CWE-440

Published

2025-04-10

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• openbsd:openssh

References

• https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
• https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
• https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
• https://www.openssh.com/txt/release-10.0
• https://www.openssh.com/txt/release-7.4

Check your stackJSON