CVE-2026-55655

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:36759
https://access.redhat.com/errata/RHSA-2026:47755
https://access.redhat.com/errata/RHSA-2026:47756
https://access.redhat.com/errata/RHSA-2026:47757
https://access.redhat.com/errata/RHSA-2026:54387
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:76748
https://access.redhat.com/errata/RHSA-2026:76993
https://access.redhat.com/errata/RHSA-2026:80513
https://access.redhat.com/errata/RHSA-2026:82749
https://access.redhat.com/errata/RHSA-2026:82750
https://access.redhat.com/errata/RHSA-2026:82751
https://access.redhat.com/errata/RHSA-2026:82752
https://access.redhat.com/errata/RHSA-2026:82753
https://access.redhat.com/errata/RHSA-2026:82754
https://access.redhat.com/errata/RHSA-2026:82755
https://access.redhat.com/errata/RHSA-2026:82756
https://access.redhat.com/errata/RHSA-2026:82757
https://access.redhat.com/errata/RHSA-2026:82758
https://access.redhat.com/errata/RHSA-2026:82759
https://access.redhat.com/errata/RHSA-2026:82761
https://access.redhat.com/errata/RHSA-2026:82762
https://access.redhat.com/errata/RHSA-2026:82763
https://access.redhat.com/errata/RHSA-2026:82897
https://access.redhat.com/errata/RHSA-2026:82898
https://access.redhat.com/errata/RHSA-2026:82899
https://access.redhat.com/errata/RHSA-2026:82900
https://access.redhat.com/errata/RHSA-2026:82901
https://access.redhat.com/errata/RHSA-2026:82902
https://access.redhat.com/errata/RHSA-2026:82903
https://access.redhat.com/errata/RHSA-2026:82904
https://access.redhat.com/errata/RHSA-2026:82907
https://access.redhat.com/errata/RHSA-2026:82908
https://access.redhat.com/errata/RHSA-2026:82909
https://access.redhat.com/errata/RHSA-2026:82910
https://access.redhat.com/errata/RHSA-2026:82912
https://access.redhat.com/errata/RHSA-2026:82913
https://access.redhat.com/errata/RHSA-2026:82914
https://access.redhat.com/errata/RHSA-2026:82915
https://access.redhat.com/errata/RHSA-2026:82916
https://access.redhat.com/errata/RHSA-2026:82917
https://access.redhat.com/errata/RHSA-2026:82918
https://access.redhat.com/errata/RHSA-2026:82920
https://access.redhat.com/errata/RHSA-2026:82921
https://access.redhat.com/errata/RHSA-2026:82922
https://access.redhat.com/errata/RHSA-2026:82923
https://access.redhat.com/errata/RHSA-2026:89739
https://access.redhat.com/errata/RHSA-2026:91232
https://access.redhat.com/security/cve/CVE-2026-55655 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2462250 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:openbsd:openssh:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

History

29 Oct 2026, 23:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:91232 -

26 Oct 2026, 04:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:89739 -

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82750 -
  • () https://access.redhat.com/errata/RHSA-2026:82751 -
  • () https://access.redhat.com/errata/RHSA-2026:82752 -
  • () https://access.redhat.com/errata/RHSA-2026:82753 -
  • () https://access.redhat.com/errata/RHSA-2026:82754 -
  • () https://access.redhat.com/errata/RHSA-2026:82755 -
  • () https://access.redhat.com/errata/RHSA-2026:82756 -
  • () https://access.redhat.com/errata/RHSA-2026:82757 -
  • () https://access.redhat.com/errata/RHSA-2026:82758 -
  • () https://access.redhat.com/errata/RHSA-2026:82759 -
  • () https://access.redhat.com/errata/RHSA-2026:82761 -
  • () https://access.redhat.com/errata/RHSA-2026:82762 -
  • () https://access.redhat.com/errata/RHSA-2026:82763 -
  • () https://access.redhat.com/errata/RHSA-2026:82897 -
  • () https://access.redhat.com/errata/RHSA-2026:82898 -
  • () https://access.redhat.com/errata/RHSA-2026:82899 -
  • () https://access.redhat.com/errata/RHSA-2026:82900 -
  • () https://access.redhat.com/errata/RHSA-2026:82901 -
  • () https://access.redhat.com/errata/RHSA-2026:82902 -
  • () https://access.redhat.com/errata/RHSA-2026:82903 -
  • () https://access.redhat.com/errata/RHSA-2026:82904 -
  • () https://access.redhat.com/errata/RHSA-2026:82907 -
  • () https://access.redhat.com/errata/RHSA-2026:82908 -
  • () https://access.redhat.com/errata/RHSA-2026:82909 -
  • () https://access.redhat.com/errata/RHSA-2026:82910 -
  • () https://access.redhat.com/errata/RHSA-2026:82912 -
  • () https://access.redhat.com/errata/RHSA-2026:82913 -
  • () https://access.redhat.com/errata/RHSA-2026:82914 -
  • () https://access.redhat.com/errata/RHSA-2026:82915 -
  • () https://access.redhat.com/errata/RHSA-2026:82916 -
  • () https://access.redhat.com/errata/RHSA-2026:82917 -
  • () https://access.redhat.com/errata/RHSA-2026:82918 -
  • () https://access.redhat.com/errata/RHSA-2026:82920 -
  • () https://access.redhat.com/errata/RHSA-2026:82921 -
  • () https://access.redhat.com/errata/RHSA-2026:82922 -
  • () https://access.redhat.com/errata/RHSA-2026:82923 -

14 Oct 2026, 07:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82749 -

12 Oct 2026, 08:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:80513 -

07 Oct 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:76993 -

06 Oct 2026, 16:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:76748 -

Information

Published : 2026-06-23 04:17

Updated : 2026-10-30 08:16


NVD link : CVE-2026-55655

Mitre link : CVE-2026-55655

CVE.ORG link : CVE-2026-55655


JSON object : View

Products Affected

openbsd

  • openssh

redhat

  • enterprise_linux
CWE
CWE-923

Improper Restriction of Communication Channel to Intended Endpoints