CVE-2026-60002

OpenSSH versions prior to 10.4 are vulnerable to a use-after-free condition in the SSH client when a server alters its host key during a key re-exchange, potentially leading to arbitrary code execution. Organizations using affected versions of Exchange that rely on OpenSSH for secure communications should prioritize patching to mitigate the risk of exploitation. This vulnerability poses a significant threat to the confidentiality and integrity of data transmitted over SSH connections.