CyberRota Analysis
AI-GeneratedOpenSSH versions up to 10.6 may inadvertently grant root privileges to sshd-session in specific environments like QNX 6 and SCO OpenServer 5 due to misconfigurations with GatewayPorts and StreamLocalForwarding, compounded by inadequate support for file-descriptor passing and unprivileged PTY device allocation. While the severity is rated low, organizations using these systems should prioritize addressing this vulnerability to mitigate potential unauthorized access risks. System administrators and security teams managing affected environments should assess their configurations and apply necessary mitigations.
Original NVD Description
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.