When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
References
Configurations
History
21 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
17 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-281 | |
| References |
|
02 Jun 2026, 16:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://go.dev/cl/781621 - Issue Tracking | |
| References | () https://go.dev/issue/79562 - Issue Tracking | |
| References | () https://groups.google.com/g/golang-announce/c/a082jnz-LvI - Mailing List | |
| References | () https://pkg.go.dev/vuln/GO-2026-5014 - Vendor Advisory | |
| First Time |
Golang crypto
Golang |
|
| CPE | cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:* | |
| CWE | CWE-295 |
22 May 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
22 May 2026, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-22 04:16
Updated : 2026-07-21 12:18
NVD link : CVE-2026-39828
Mitre link : CVE-2026-39828
CVE.ORG link : CVE-2026-39828
JSON object : View
Products Affected
golang
- crypto
