AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-10896

HIGH · CVSS 7.1 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-10896
Severity
HIGH
CVSS
7.1
EPSS
0.35%

Original Filing — NVD Description

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.