ZeroDay Findings
Sign inSign up

Findings

CVE-2025-32728

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Published Apr 10, 2025 · updated Oct 15, 2026 · openbsd openssh

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 10, 2025 · NIST NVD

    Detected

    In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

  2. Oct 15, 2026 · NIST NVD

    Updated

    In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Affected

  • cpe debian/debian linux11.0
  • cpe openbsd/opensshversion unspecified

Sources

  • CVE.orgCVE-2025-32728

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-32728

    In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

    nvd.nist.gov

References

CVE-2025-32728 · ZeroDay Findings