# CVE-2026-116794: russh SSH agent confirmation bypass

Source: https://junglewise.ai/threats/cve-2026-116794-russh-is-a-rust-ssh-client-and-server-library-that-includes-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-116794 · Severity: high · CVSS 4 · Published 2026-10-28

russh is a Rust SSH client and server library used to manage SSH authentication. In versions 0.50.0-beta.12 through 0.65.0, the SSH agent server fails to ask for user confirmation when signing with keys that were added with the confirmation constraint (ssh-add -c). An attacker with access to the agent socket, such as through a forwarded SSH agent connection, can bypass this check and authenticate or sign data as the user without approval.

Technologies: [russh (crates.io)](https://junglewise.ai/threats/technologies/crates-io-russh), [Eugeny Russh](https://junglewise.ai/threats/technologies/eugeny-russh). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io), [Eugeny](https://junglewise.ai/threats/vendors/eugeny).

## Quick answers

**Is CVE-2026-116794 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-116794 being exploited in the wild.

**How severe is CVE-2026-116794?** High severity, with a CVSS score of 4, published 28 October 2026.

**Which products and versions are affected?** russh (crates.io) < 0.65, ECOSYSTEM:introduced=0,fixed=0.65; Eugeny Russh 0.50.0-beta.12 to 0.65.0.

**Is there a fix for CVE-2026-116794?** Yes. russh (crates.io): upgrade to 0.65 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-116794 attacked?** It is attacked over the network or from the adjacent network, in a software library.

**Am I affected by CVE-2026-116794?** Check whether you run russh (crates.io) or Eugeny Russh at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- russh (crates.io): upgrade to 0.65 or later

  ```sh
  cargo update -p russh
  ```


## Technical details

The SSH agent server's Connection::try_sign method in russh/src/keys/agent/server.rs recognizes the SSH_AGENT_CONSTRAIN_CONFIRM flag but returns a hard-coded successful result instead of calling the Agent::confirm hook. This allows any process that can reach the agent socket to use constrained keys without triggering the required confirmation callback, though the separate Agent::confirm_request hook still executes for every signing request.

## Affected products

- Eugeny russh 0.50.0-beta.12 to 0.65.0

## Identifiers

- CVE-2026-116794
- GHSA-vp5q-ff62-jwqv

## Timeline

- 2026-10-28: disclosed
- 2025-01-27: patched

## References

- [https://github.com/Eugeny/russh/commit/3e04597dc54e36bfc85c21996f7d8d9d224e9826](https://github.com/Eugeny/russh/commit/3e04597dc54e36bfc85c21996f7d8d9d224e9826)
- [https://github.com/Eugeny/russh/commit/62db6e7defd6d244159da962ccccb029e785ce0f](https://github.com/Eugeny/russh/commit/62db6e7defd6d244159da962ccccb029e785ce0f)

## Related threats

- [russh SSH server signature algorithm mismatch in publickey auth](https://junglewise.ai/threats/cve-2026-111062-a-russh-ssh-server-accepts-a-publickey-authentication-whose)
- [pageant PageantStream unbounded frame buffering](https://junglewise.ai/threats/cve-2026-116775-pageant-provides-a-pageantstream-type-that-implements-asyncread)
- [russh SSH library zero maximum packet size denial of service](https://junglewise.ai/threats/cve-2026-116774-russh-is-a-rust-ssh-client-and-server-library-that-includes-an)
- [russh memory exhaustion via unbounded EXT_INFO packets](https://junglewise.ai/threats/cve-2026-116773-russh-is-a-rust-ssh-client-and-server-library-that-includes-an)
- [russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages](https://junglewise.ai/threats/cve-2026-116696-russh-is-a-rust-ssh-client-and-server-library-that-includes-an)