一、漏洞信息
漏洞编号：CVE-2026-39831
漏洞归属组件：crypto
漏洞归属分支：默认分支
漏洞归属的版本：v0.45.0
漏洞修复版本: 0.52.0
CVSS分值：
BaseScore： N/A None
Vector： N/A
漏洞简述：
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
漏洞公开时间：2026-05-22 04:16:22
漏洞创建时间：2026-06-24 02:55:19
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-39831
一、漏洞信息
漏洞编号：CVE-2026-39831
漏洞归属组件：crypto
漏洞归属分支：默认分支
漏洞归属的版本：v0.45.0
漏洞修复版本: 0.52.0
CVSS分值：
BaseScore： N/A None
Vector： N/A
漏洞简述：
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
漏洞公开时间：2026-05-22 04:16:22
漏洞创建时间：2026-06-24 02:55:19
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-39831