CVE-2026-55655 Common Vulnerabilities and Exposures

Upstream information

CVE-2026-55655 at MITRE

Description

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v3 Scores
CVSS detail	CNA (Red Hat)	National Vulnerability Database
Base Score	5	6.1
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Attack Vector	Local	Local
Attack Complexity	High	Low
Privileges Required	Low	None
User Interaction	Required	Required
Scope	Unchanged	Unchanged
Confidentiality Impact	High	High
Integrity Impact	Low	Low
Availability Impact	None	None
CVSSv3 Version	3.1	3.1

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

RHSA-2026:47755, published Fri Jul 31 15:06:56 UTC 2026
RHSA-2026:47756, published Thu Jul 30 15:06:29 UTC 2026

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Liberty Linux 10	`openssh >= 9.9p1-25.el10_2` `openssh-askpass >= 9.9p1-25.el10_2` `openssh-clients >= 9.9p1-25.el10_2` `openssh-keycat >= 9.9p1-25.el10_2` `openssh-keysign >= 9.9p1-25.el10_2` `openssh-server >= 9.9p1-25.el10_2`	Patchnames: RHSA-2026:47757
SUSE Liberty Linux 8	`openssh >= 8.0p1-30.el8_10` `openssh-askpass >= 8.0p1-30.el8_10` `openssh-cavs >= 8.0p1-30.el8_10` `openssh-clients >= 8.0p1-30.el8_10` `openssh-keycat >= 8.0p1-30.el8_10` `openssh-ldap >= 8.0p1-30.el8_10` `openssh-server >= 8.0p1-30.el8_10` `pam_ssh_agent_auth >= 0.10.3-7.30.el8_10`	Patchnames: RHSA-2026:47755
SUSE Liberty Linux 9	`openssh >= 9.9p1-9.el9_8` `openssh-askpass >= 9.9p1-9.el9_8` `openssh-clients >= 9.9p1-9.el9_8` `openssh-keycat >= 9.9p1-9.el9_8` `openssh-server >= 9.9p1-9.el9_8` `pam_ssh_agent_auth >= 0.10.4-7.9.el9_8`	Patchnames: RHSA-2026:47756

SUSE Timeline for this CVE

CVE page created: Wed Jul 29 21:52:57 2026
CVE page last modified: Fri Jul 31 20:39:09 2026