Is CVE-2026-110925 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110925?

CVE-2026-110925 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-110925

Description

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.